14.10.2024 Read More
Top 5 Ways to Reduce False Positives in Your SOC
Discover five actionable strategies to minimize false positives in your SOC, reduce alert fatigue, and strengthen your organization's overall security posture.
Andreas Rogge
4 Blog PostsI am a Senior SOC Engineer with over 12 years of experience in various IT roles, specializing in Microsoft technologies. My current focus is on enhancing the managed SOC experience for our customers and supporting new clients as they come on board, ensuring their security operations are optimized and efficient.
08.11.2024 Read More
Cyber Security Roundtable 2024: Exploring the Future of Automation and AI in Security with Microsoft
On October 17, 2024, water IT Security and Microsoft hosted the Cyber Security Roundtable in Munich, exploring automation and AI in security. Highlights included sessions on Copilot for Security, custom automation, and insights from experts, fostering collaboration and innovation.
13.12.2024 Read More
Building Effective Custom Detection Rules
Discover how to build effective custom detection rules (DCRs) to enhance your organization's cybersecurity defenses. This guide, based on lessons from the field, explores the 'what' and 'why' of detection engineering, compares proactive and reactive approaches, and outlines a structured, step-by-step process for crafting tailored rules that minimize risks and reduce SOC workload. Perfect for SOC analysts, detection engineers, and CISOs looking to stay ahead of evolving threats.
22.05.2025 Read More
Device Code Phishing: A Low-Noise, High-Impact Threat That Demands Your Attention
Device Code Phishing exploits the OAuth 2.0 device login flow to trick users into authorizing malicious apps via legit Microsoft pages. It’s stealthy, hard to detect, and grants attackers broad access. Detection, access controls, and awareness are key.