İsmet Arslan
Cyber Security Specialist / SOC · Threat Intelligence · SIEM · Research
I work on detecting threats, improving security visibility, and turning operational data into actionable defense decisions.
I connect security operations with research, open tools, and practical methods.
Areas of focus
From operational security questions to measurable outcomes.
SOC & SIEM
Log-source coverage, normalization, alert quality, and security visibility.
Detection Engineering
Detection logic, rule design, and measurable improvement in ATT&CK context.
CTI & Threat Hunting
Source monitoring, context-building, and defensive hypotheses.
Incident readiness
Evidence collection approaches, processes, and scenarios.
Selected work
Examples with inspectable code, methods, and limitations.
SOC Visibility Evidence
An open study of security visibility through inspectable evidence rather than assumptions.
View sourceCyber Intelligence Radar
An open-source tool for tracking security news and research.
View sourceDede Korkut character network
Network analysis of character relations. Computations were rerun; textual source review and the paper remain in progress.
View sourceWays to work together
Scope-based advisory work and draft education and mentorship programs for people and teams.
Consulting
SOC/SIEM, detection engineering, CTI, and ISO/IEC 27001 ISMS advisory.
View detailsMentorship
Draft programs for learning goals and practical growth.
View detailsTraining
Tailored corporate training and applied workshops.
View detailsBlog
Articles and technical notes published on this site.
Lookyloo ve Phishing Tespiti Kullanımı
A practical article in Turkish about investigating phishing links with Lookyloo.
Read articleWho am i
An introductory post in Turkish about cybersecurity, technology, and the purpose of this blog.
Read articleResearch and community
Publications, teaching, and ties with academia.
Evidence-Based Security Visibility Assessment Model for SOC Environments
Conference work listed by the publisher.
Publisher recordSistersLab Ada Lovelace Akademi
Teaching contribution to an Introduction to Cybersecurity session.
View postAbout
I work in security operations and threat intelligence. In open projects, I aim to make methods, sources, and limits of claims visible.
View detailsHave a project in mind?
Reach me on LinkedIn to discuss scope and expectations. This site does not have an automated booking or application form.