video1.0<iframe src="https://www.loom.com/embed/e8405fe2157c418d934710b748976e8f" frameborder="0" width="2560" height="1920" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>19202560Loomhttps://www.loom.com19202560https://cdn.loom.com/sessions/thumbnails/e8405fe2157c418d934710b748976e8f-ee244b06318dc9f4.gif906.838In this video, I walk through a practical sock workflow where I simulate suspicious process activity in Splunk and create an automated alert in Microsoft Sentinel for failed sign-ins. I demonstrate how to generate synthetic process events, visualize suspicious executions, and set up a scheduled alert for failed login attempts that exceed a threshold. The alert triggers automatically for investigation, ensuring we stay proactive against potential threats. I encourage viewers to implement similar detection engineering practices in their environments. Thank you for watching!