// security operations · detection engineering
Practical security for small businesses.
I'm AJ, a SOC analyst. I help small teams see what's happening on their network, catch threats early and get ready for Cyber Essentials, without enterprise prices.
Get in touch Try the Lab →About
I work in a security operations centre, triaging alerts, hunting threats and investigating incidents. Outside work I run a homelab where I build and break things, write detection rules and make small tools.
AJ Lab Tech is where I share that work: services for small businesses, detection content and the tools I build along the way.
- Role: SOC Analyst
- SIEM: Microsoft Sentinel, Elastic
- Focus: Detection, DFIR, KQL
- Based: UK
Services
Fixed-price, clearly scoped work. No retainers unless you want one.
Security health check
A review of your accounts, devices, email security and backups, with a plain-English report and a prioritised fix list.
from £250Sentinel / Elastic setup
Get logging and alerting running: data connectors, sensible analytics rules and a dashboard you'll actually look at.
quoted per projectDetection engineering
Custom KQL hunting queries and analytics rules mapped to MITRE ATT&CK, tuned to cut noise in your environment.
quoted per projectIncident response playbooks
Step-by-step runbooks for phishing, account compromise and ransomware, so your team knows what to do on a bad day.
quoted per projectProducts
Detection content and templates you can drop straight into your SOC.
Sentinel hunting query pack
Documented KQL hunting queries for Microsoft Sentinel and Defender, with what each one finds and how to triage hits.
coming soonSOC runbook templates
Editable triage and response templates for the alerts SOC teams see most often.
coming soonLab
Small games and tools to play with. They all run in your browser.
Contact
Tell me a little about your business and what you need. I'll reply within two working days.
hello@ajlabtech.com