
David Greenwood
Product Marketing Manager
David Greenwood helps builds security products that make SOC teams say, “That’s exactly what we need!”
Articles by David Greenwood

Why multi-tenant SOCs need multi-level agents
One SOC can protect dozens of customers, but every customer works differently. See how multi-level agents give security teams one shared way to investigate alerts, while keeping the local context needed to make the right call.

Every detection needs a next step: Why runbooks solve the investigation problem
A detection can raise the alarm and still leave the analyst with the hardest work. Runbooks put the investigation path beside the alert.

UEBA in the Real World: Catching Intrusions That Don’t Look Like Intrusions
Traditional SOC rules miss attacks using valid accounts and MFA fatigue. Learn real-world cases where UEBA detects stealthy lateral movement, OAuth abuse, and cloud console misuse.

Shadow IT: The Initial Access You Didn’t Log
Shadow IT isn’t just governance debt, it’s an attacker’s beachhead. This post explores real intrusions where forgotten assets, rogue tenants, exposed cloud storage, and abandoned domains enabled initial access, and why closing visibility gaps is now a core SOC capability.



