https://ktalons.github.io/tags/suricata/Recent content in Suricata on Kyle VersluisHugoenSun, 09 Aug 2026 00:00:00 +0000https://ktalons.github.io/blog/phase-a-active-is-not-proof/Sun, 09 Aug 2026 00:00:00 +0000https://ktalons.github.io/blog/phase-a-active-is-not-proof/Phase A is complete: agents on three real endpoints, Suricata on the wire, and a SOC dashboard in git. The recurring lesson: Active is a liveness signal, not an acceptance test.https://ktalons.github.io/projects/iaes-soc-elk-stack-snapshot/Thu, 21 May 2026 00:00:00 +0000https://ktalons.github.io/projects/iaes-soc-elk-stack-snapshot/Public snapshot of my OT SOC engineering work at UArizona FM: ECS-mapped Logstash ingestion pipelines plus three custom operations tools (DLQ Watcher, DLQ Manager, and UTIS Reports Ingestion Helper).