A running diary of detection engineering by Agron Gemajli. Threat models, cloud hardening, and Splunk detections, built and broken in a homelab and written up in the open.https://detectiondiary.com/en-ushttps://detectiondiary.com/blog/my-blog-is-in-my-siem/https://detectiondiary.com/blog/my-blog-is-in-my-siem/Every request to this site/blog lands in my homelab SIEM. The full Cloudfront to Splunk pipeline, some AWS gotchas, and what I actually detect.Sat, 15 Aug 2026 23:40:00 GMTdetectionsplunkawscloudfrontinfrahttps://detectiondiary.com/blog/hello-detection-diary/https://detectiondiary.com/blog/hello-detection-diary/A quick introduction: who I am, what Detection Diary is for, and the kind of security writing you can expect here.Sat, 15 Aug 2026 01:23:00 GMTintrometa