<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>SIEM on Code and Cypher</title><link>https://codeandcypher.com/tags/siem/</link><description>Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.</description><image><title>Code and Cypher</title><url>https://codeandcypher.com/images/papermod-cover.png</url><link>https://codeandcypher.com/</link></image><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 02 Oct 2026 15:48:11 -0700</lastBuildDate><atom:link href="https://codeandcypher.com/tags/siem/index.xml" rel="self" type="application/rss+xml"/><item><title>Acuity Health: Part 7 — Cyber Threat Intelligence &amp; Flare Operations</title><link>https://codeandcypher.com/series/acuity-health-security-architecture/part-7-cyber-threat-intelligence-flare-operations/</link><pubDate>Tue, 20 Oct 2026 00:00:00 -0700</pubDate><guid>https://codeandcypher.com/series/acuity-health-security-architecture/part-7-cyber-threat-intelligence-flare-operations/</guid><description>Build an actionable CTI program using MITRE ATT&amp;CK, prioritize threat intelligence requirements, and respond dynamically to adversary flare campaigns.</description></item><item><title>Acuity Health: Part 5 — Active Defense &amp; Canary Deception</title><link>https://codeandcypher.com/series/acuity-health-security-architecture/part-5-active-defense-threat-hunting-canaries/</link><pubDate>Tue, 06 Oct 2026 00:00:00 -0700</pubDate><guid>https://codeandcypher.com/series/acuity-health-security-architecture/part-5-active-defense-threat-hunting-canaries/</guid><description>Engineer active deception environments, plant canary tokens in memory and file shares, and automate blue team threat hunting across enterprise network shares.</description></item><item><title>Acuity Health: Part 1 — Securing the 2 AM Urgent Care (Zero Trust for Distributed Clinics)</title><link>https://codeandcypher.com/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/</link><pubDate>Tue, 08 Sep 2026 00:00:00 -0700</pubDate><guid>https://codeandcypher.com/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/</guid><description>Secure decentralized urgent care clinics with a lean IT team using port-level dynamic VLANs, gloved-hand MFA, EDR micro-isolation, and immutable WORM backups.</description></item><item><title>Active Blue-Team Defense, Applied Cryptography &amp; Security Operations</title><link>https://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/</link><pubDate>Mon, 13 Jul 2026 00:00:00 -0700</pubDate><guid>https://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/</guid><description>Enterprise research synthesis on active blue-team defense, applied cryptography, and Zero Trust network telemetry operations in high-threat environments.</description></item><item><title>Enterprise Healthcare Security Architecture: The Acuity Health Blueprint</title><link>https://codeandcypher.com/papers/enterprise-healthcare-security-architecture/</link><pubDate>Mon, 29 Jun 2026 00:00:00 -0700</pubDate><guid>https://codeandcypher.com/papers/enterprise-healthcare-security-architecture/</guid><description>Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.</description></item></channel></rss>