Archive - SecOps Unpacked

Friday SIEM #35 The great SIEM migration wave started, and AI SOC might be the cause of it.

From what I hear from many practitioners, we are going through the great SIEM migration.

Oct 30 • Filip Stojkovski

Your Basics Still Matter, No Matter How Much AI You Slap On Top

While going through our AI for SecOps market research, one thing kept coming up as we reviewed the solutions out there: the basics are still necessary…

Oct 21 • Filip Stojkovski

Friday SIEM #34 : “old SIEM” vs “new SIEM” is mostly packaging

I’m skeptical of how much architectural novelty gets attached to those labels.

Oct 16 • Filip Stojkovski

Friday SIEM #33: SIEM is just a SIEM

Friday SIEM post is here!

Oct 9 • Filip Stojkovski

The New SecOps Roles, ShiftMap view

How SecOps roles shift when building gets easier

Oct 7 • Filip Stojkovski

Friday SIEM #32: four things people mean when they say SIEM

Friday SIEM post is here, and this week we have a poll!

Oct 2 • Filip Stojkovski

September 2026

Friday SIEM # 31: The knowledge layer

I was doing some analysis this week on Context Graphs vs Knowledge Bases/Graphs, and I think we can easily get lost in all the “graph” terminology.

Sep 25 • Filip Stojkovski

We Needed a New Frontier Model to Confirm You Should Go Deterministic Before LLM

We needed a new frontier model to confirm deterministic comes first. Where Jev fits in your AI SOC, what it can't fix, and why not to build agents with…

Sep 24 • Filip Stojkovski

Friday SIEM #30: AI Agent Builder or Agent Studios for a SIEM

Friday SIEM post, apparently this is my 30th release 🙌

Sep 18 • Filip Stojkovski

Friday SIEM #29: Where attack emulation fits in the new SIEM architecture

Originally posted on LinkedIn, 11 September 2026

Sep 11 • Filip Stojkovski

AI SOC Core Components | 2026 Edition

AI SOC defined from the practitioner side, not the vendor pitch. What it actually does, from signal to closure, at what level of autonomy, and what

Sep 9 • Filip Stojkovski

Friday SIEM #28: RunReveal to ClickHouse: both sides converge on the SIEM

Originally posted on LinkedIn, 4 September 2026

Sep 4 • Filip Stojkovski

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts