Tag See all →

#alerting

2 stories

Banner: security monitoring and SIEM for a small team, log pipeline and first detections

DevOps & CI/CD

Security monitoring and SIEM for a small team: the log pipeline and the first ten detections

Samuel Osei · May 12, 2026 · 7 min read

A SIEM is only as good as the logs you feed it and the alerts someone answers. How to build a security monitoring pipeline step by step, which log sources come first, ten detections worth writing on day one, and how to keep alert fatigue away.

Banner: AWS budget alert arriving long after a cloud spend spike began

Cloud & Infrastructure Bug Report

AWS Budget alert arrived two days after the spend spike started

Ryan Pham · Aug 13, 2025 · 6 min read

A misconfigured batch job launched 60 GPU instances on a Friday evening. Our monthly budget alert fired on Sunday afternoon, after 14,000 USD was spent. Monthly thresholds and billing data lag make budgets slow. We added daily budgets, anomaly detection and real-time usage guardrails.