How to reduce alert noise in LogScale
Reduce LogScale alert noise with service-specific validation, early email notifications, and a separate Teams alert for persistent failures.
Read articleInformation security · field notes
Security operations, made useful.
I’m Sebastian Selig, an information security practitioner focused on Falcon LogScale and practical security operations. I work hands-on with firewalls, vulnerability management, email security, and operational security data. I build tools such as MyLogScale and UpdatePulse and document what works. This site collects my field notes, queries, and projects for security teams.
LinkedIn (opens in a new tab)
How long should you keep audit logs? A practical retention guide for small teams
Keep audit logs long enough to investigate, meet your obligations, and prove what happened — but separate fast searchable data from long-term archive data.
Read article
5 LogScale queries to audit Active Directory group changes
Five practical LogScale queries for tracking who added or removed members from privileged AD groups.
Read articleMyLogScale
A curated library of Falcon LogScale queries and practical guidance for security teams. Find useful starting points, adapt them to your environment, and contribute your own queries.
Visit MyLogScale (opens in a new tab)UpdatePulse
UpdatePulse monitors software releases and security vulnerabilities and sends relevant changes to where teams already work. Notifications arrive through Slack, Microsoft Teams, email, or webhooks.
Visit UpdatePulse (opens in a new tab)