Working notes on backend systems, security, and applied ML.https://hishamtariq.com/https://hishamtariq.com/blog/wazuh-tuning-alert-noise/https://hishamtariq.com/blog/wazuh-tuning-alert-noise/Measure Wazuh alert volume by rule, then cut it with level overwrites, level-0 child rules, agent-group scoping, and alert-level thresholds, while keeping the detections that matter.Tue, 01 Sep 2026 00:00:00 GMTSecurityWazuhSIEMAlert FatigueDetection EngineeringBlue Teamhttps://hishamtariq.com/blog/wazuh-active-response-safely/https://hishamtariq.com/blog/wazuh-active-response-safely/Attach automatic actions to Wazuh rules with stateful active response scripts, and build in the allowlists, timeouts, dry runs, and audit logs that keep automation from becoming the incident.Mon, 31 Aug 2026 00:00:00 GMTSecurityWazuhActive ResponseIncident ResponseAutomationPythonhttps://hishamtariq.com/blog/wazuh-custom-decoders-and-rules/https://hishamtariq.com/blog/wazuh-custom-decoders-and-rules/Write Wazuh decoders for plain-text and JSON application logs, build a parent-child rule tree, add frequency rules for brute force, and map every rule to MITRE ATT&CK.Sun, 30 Aug 2026 00:00:00 GMTSecurityWazuhSIEMDetection EngineeringMITRE ATT&CKFastAPIhttps://hishamtariq.com/blog/wazuh-detection-pipeline-architecture/https://hishamtariq.com/blog/wazuh-detection-pipeline-architecture/Trace a log line from a Wazuh agent through remoted, analysisd, decoders, and rules to an alert in the indexer, and learn where each hook for custom detection lives.Sat, 29 Aug 2026 00:00:00 GMTSecurityWazuhSIEMDetection EngineeringBlue TeamLogginghttps://hishamtariq.com/blog/building-scalable-cli-with-typer/https://hishamtariq.com/blog/building-scalable-cli-with-typer/Learn how to create beautiful, scalable command-line applications using Typer - the modern Python CLI framework from the creator of FastAPI.Wed, 15 Jan 2025 00:00:00 GMTPythonPythonCLITyperTutorialhttps://hishamtariq.com/blog/introducing-sentinelflux/https://hishamtariq.com/blog/introducing-sentinelflux/Announcing my new project: SentinelFlux. A deep dive into bridging the gap between SIEM detection and autonomous incident response using Agentic AI.Sat, 21 Dec 2024 00:00:00 GMTSecurityAI SecurityWazuhAutomationPythonLangGraphhttps://hishamtariq.com/blog/voice-ai-agent-architecture/https://hishamtariq.com/blog/voice-ai-agent-architecture/How I built a high-performance voice AI agent using Node.js, Deepgram, and OpenAI. A deep dive into system architecture, latency optimization techniques, and handling real-time audio streams.Thu, 19 Dec 2024 00:00:00 GMTAI & AutomationVoice AINode.jsSystem DesignOpenAIDeepgramWebSocketshttps://hishamtariq.com/blog/building-mcp-task-manager/https://hishamtariq.com/blog/building-mcp-task-manager/Learn how to create a Model Context Protocol (MCP) server for intelligent task management using agentic patterns and LLM integrationFri, 08 Nov 2024 00:00:00 GMTAI & AutomationMCPAIPythonTask ManagementAgentshttps://hishamtariq.com/blog/securing-fastapi-applications/https://hishamtariq.com/blog/securing-fastapi-applications/Production-ready security patterns for FastAPI including authentication, rate limiting, CORS, and protection against common vulnerabilitiesThu, 07 Nov 2024 00:00:00 GMTSecurityFastAPISecurityPythonBackendAuthhttps://hishamtariq.com/blog/uv-python-package-manager/https://hishamtariq.com/blog/uv-python-package-manager/Discover UV - the revolutionary Python package manager that's 10-100x faster than pip. Learn installation, workflows, and why developers are switching in 2025Tue, 15 Oct 2024 00:00:00 GMTPythonPythonDevOpsPackage ManagementTools