daemon // security logs https://daemon.cushard.dev Field notes from a detection-platform operator at MSSP scale. en-us <![CDATA[Why we killed the SOAR mock fleet]]> https://daemon.cushard.dev/transmissions/why-we-killed-the-soar-mock-fleet https://daemon.cushard.dev/transmissions/why-we-killed-the-soar-mock-fleet Fri, 08 May 2026 00:00:00 GMT WARN <![CDATA[Detection drift at MSSP scale]]> https://daemon.cushard.dev/transmissions/detection-drift-at-mssp-scale https://daemon.cushard.dev/transmissions/detection-drift-at-mssp-scale Wed, 22 Apr 2026 00:00:00 GMT INFO