// Insights

Detection Engineering

Writing and tuning detections - KQL and Sigma, detection-as-code, MITRE ATT&CK coverage, false-positive reduction, and detections for newly disclosed vulnerabilities.

Detection Engineering 9 min read

How to Reduce False Positives in Microsoft Sentinel

Practical ways to reduce false positives in Microsoft Sentinel - query refinement, entity exclusions, thresholds, suppression, enrichment, and a tuning loop that sticks.

10 August 2026Read More

Detection Engineering 9 min read

How to Reduce SOC Alert Fatigue Without Missing Real Threats

A practical, example-led guide to cutting false positives in your SOC - measuring noise, baselining normal, enriching with context, detection-as-code, and tuning that keeps real threats visible.

23 June 2026Read More