<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Vinish Justin | Blog</title><description>Notes on SIEM, detection engineering, and security automation.</description><link>https://vinishjustin.dev/</link><item><title>Why I started writing about detection engineering</title><link>https://vinishjustin.dev/blog/why-i-write-about-detection-engineering/</link><guid isPermaLink="true">https://vinishjustin.dev/blog/why-i-write-about-detection-engineering/</guid><description>After 13 years in SIEM and SOC work, I&apos;m putting my notes somewhere public.</description><pubDate>Wed, 16 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Tuning use cases without losing coverage</title><link>https://vinishjustin.dev/blog/tuning-use-cases-without-losing-coverage/</link><guid isPermaLink="true">https://vinishjustin.dev/blog/tuning-use-cases-without-losing-coverage/</guid><description>A starter post showing headings, lists, and a Splunk search. Replace it with your own.</description><pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate></item></channel></rss>