https://samimi.tech/blog/ SOC engineering, secure development and AI in security. en https://samimi.tech/blog/how-socs-define-and-prioritise-monitoring-use-cases/ https://samimi.tech/blog/how-socs-define-and-prioritise-monitoring-use-cases/ Wed, 14 Oct 2026 08:00:00 +0000 Four ways SOCs decide what to detect — threat-, risk-, compliance- and data-driven — what each gets right, where each fails, and the layered order that works. https://samimi.tech/blog/when-your-security-tools-know-too-much/ https://samimi.tech/blog/when-your-security-tools-know-too-much/ Wed, 14 Oct 2026 08:00:00 +0000 Search engines saw slivers of your security work. LLMs aggregate and synthesise it on infrastructure you do not control. Seven governance rules for using them.