Practical Detection Engineering, Threat Hunting & AI Security research.
Real-world articles for SOC analysts, detection engineers, and security architects. No hype. Just detections, telemetry, and how attackers evade them.
Read ArticlesLatest Articles
No articles match that search yet.
AI Gateway Telemetry in the SOC: From Events to AI Security Detections
Part 2 of the series. A working demonstration that turns AI Gateway (LLM Guard) telemetry into LogRhythm detections (prompt injection, credential exposure, PII/DLP, prohibited topics, malicious URLs, and token abuse), each blocked at the gateway and made investigable in the SIEM.
Read →AI Gateways and AI Agents: Building a Layered AI Security Architecture
AI Agent monitoring shows what an agent did, but an agent only executes a decision the AI Model already made. A complete AI security strategy secures every layer, starting with the decision itself at the AI Gateway. Here's how the layers fit together.
Read →