---
title: "SIEM"
canonical: "https://codeandcypher.com/tags/siem/"
---

# SIEM



## Index

- [Acuity Health: Part 5 — Active Defense & Canary Deception](/series/acuity-health-security-architecture/part-5-active-defense-threat-hunting-canaries/index.md) (2026-10-06): Engineer active deception environments, plant canary tokens in memory and file shares, and automate blue team threat hunting across enterprise network shares.

- [Acuity Health: Part 1 — Securing the 2 AM Urgent Care (Zero Trust for Distributed Clinics)](/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/index.md) (2026-09-08): Secure decentralized urgent care clinics with a lean IT team using port-level dynamic VLANs, gloved-hand MFA, EDR micro-isolation, and immutable WORM backups.

- [Active Blue-Team Defense, Applied Cryptography & Security Operations](/papers/active-defense-cryptography-and-blue-team-integration/index.md) (2026-07-13): Enterprise research synthesis on active blue-team defense, applied cryptography, and Zero Trust network telemetry operations in high-threat environments.

- [Enterprise Healthcare Security Architecture: The Acuity Health Blueprint](/papers/enterprise-healthcare-security-architecture/index.md) (2026-06-29): Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.