blue team operator working mostly on investigations and detection tuning. background in chemical engineering. i spend a lot of time reading logs, breaking labs, and trying to understand root causes rather than just chasing alerts.

doing investigations on BTLO
and putting together full timelines from real cases.