{"product_id":"detection-engineering-alert-tuning-sentinel-or-splunk","title":"Detection Engineering \u0026 Alert Tuning (Defender, Sentinel or Splunk)","description":"\u003cp\u003eMake your security alerts worth reading. I'll tune the noisy ones and build detections that catch real threats, using the same approach I use on the Defender and Splunk Enterprise Security platforms I own for a major UK bank.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReview of your current custom detections, analytics rules or correlation searches and their alert volumes\u003c\/li\u003e\n\u003cli\u003eTuning of the noisiest rules to cut false positives\u003c\/li\u003e\n\u003cli\u003eUp to 5 new custom detections written in KQL or SPL\u003c\/li\u003e\n\u003cli\u003eCheck of log sources for gaps in what you're collecting\u003c\/li\u003e\n\u003cli\u003eHandover document with each detection explained\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eBusinesses already running Microsoft Defender XDR, Microsoft Sentinel or Splunk Enterprise Security.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Microsoft Defender \/ Sentinel (KQL)","offer_id":67877770330503,"sku":"KG-DETECT-SENTINEL","price":1200.0,"currency_code":"GBP","in_stock":true},{"title":"Splunk Enterprise Security (SPL)","offer_id":67877770363271,"sku":"KG-DETECT-SPLUNK","price":1200.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kingguard-banner-v2.png?v=1793654193","url":"https:\/\/kingguardcyber.com\/products\/detection-engineering-alert-tuning-sentinel-or-splunk","provider":"KingGuard Cyber","version":"1.0","type":"link"}