Security Operations

David Booth

August 12, 2026

An LLM-triaged SIEM: reviewing thousands of security events a day with a small team

Most health providers we talk to have the same shape of problem. Log sources everywhere, a security budget that funds part of one person's week, and an alert console nobody has opened since the fortnight after it was installed. The logs are being col ...

#siem#security-operations#llm#prompt-injection#health-it

in artificial-intelligence healthcare

David Booth

August 12, 2026

Practical AI in Cyber Security: the series

This series is about how a small senior team covers security operations work that normally needs a much bigger roster. Everything we write about comes out of a platform we built and still run: more than 100 scheduled checks, executing around the cloc ...

#cyber-security#llm#security-operations#essential-eight#monitoring

in artificial-intelligence healthcare