Seth Goldhammer
@socalledseth.com
20+ years in cybersecurity • currently @grayloginc • in Boulder, CO • Lets talk music, movies, Warriors, Raiders, CU Buffs
Pinned
Seth Goldhammer
@socalledseth.com
· Dec 16
Been on Bluesky for a month and havent introduced myself.
* Grew up in the Bay Area and now live in Boulder, CO
* 20+ years in cybersecurity (currently VP of Product Graylog & advisor to Hackerverse)
* (very) slowly restoring a '56 Ford pickup
* Will rant about sports with occasional netsec news
* Grew up in the Bay Area and now live in Boulder, CO
* 20+ years in cybersecurity (currently VP of Product Graylog & advisor to Hackerverse)
* (very) slowly restoring a '56 Ford pickup
* Will rant about sports with occasional netsec news
Not sure why I found this as challenging as it was
Wordle 1,698 5/6*
⬛🟨⬛⬛🟨
⬛🟩🟨⬛⬛
⬛🟩⬛⬛🟩
⬛🟩⬛⬛🟩
🟩🟩🟩🟩🟩
Wordle 1,698 5/6*
⬛🟨⬛⬛🟨
⬛🟩🟨⬛⬛
⬛🟩⬛⬛🟩
⬛🟩⬛⬛🟩
🟩🟩🟩🟩🟩
February 11, 2026 at 6:07 PM
Not sure why I found this as challenging as it was
Wordle 1,698 5/6*
⬛🟨⬛⬛🟨
⬛🟩🟨⬛⬛
⬛🟩⬛⬛🟩
⬛🟩⬛⬛🟩
🟩🟩🟩🟩🟩
Wordle 1,698 5/6*
⬛🟨⬛⬛🟨
⬛🟩🟨⬛⬛
⬛🟩⬛⬛🟩
⬛🟩⬛⬛🟩
🟩🟩🟩🟩🟩
Reposted by Seth Goldhammer
Security teams buy “one more tool” to reduce toil.
Then investigations turn into nine tabs and a Slack thread.
As @socalledseth.com puts it: AI only pays off when it reduces steps inside the analyst’s flow — not when it becomes tab #10.
Read the blog:
graylog.org/post/the-hum...
Then investigations turn into nine tabs and a Slack thread.
As @socalledseth.com puts it: AI only pays off when it reduces steps inside the analyst’s flow — not when it becomes tab #10.
Read the blog:
graylog.org/post/the-hum...
The Human-AI Alliance in Security Operations
AI in security operations reduces context switching in SOC investigations, supports analyst judgment, and keeps workflows fast, and human-led.
graylog.org
February 11, 2026 at 2:08 PM
Security teams buy “one more tool” to reduce toil.
Then investigations turn into nine tabs and a Slack thread.
As @socalledseth.com puts it: AI only pays off when it reduces steps inside the analyst’s flow — not when it becomes tab #10.
Read the blog:
graylog.org/post/the-hum...
Then investigations turn into nine tabs and a Slack thread.
As @socalledseth.com puts it: AI only pays off when it reduces steps inside the analyst’s flow — not when it becomes tab #10.
Read the blog:
graylog.org/post/the-hum...
Not sure why they keep interrupting the AI ads with some type of sport game
February 9, 2026 at 3:09 AM
Not sure why they keep interrupting the AI ads with some type of sport game
This has been the Mondayist Monday Ive had in awhile
February 2, 2026 at 9:32 PM
This has been the Mondayist Monday Ive had in awhile
Basketball just won’t be the same when #30 retires. #Dubnation
January 16, 2026 at 5:17 AM
Basketball just won’t be the same when #30 retires. #Dubnation
Reposted by Seth Goldhammer
Gyms fill in January, empty in February. Security AI mirrors it: fast launches, big promises—then analysts validate outputs. Skip explainability, governance, and context, and AI stalls. Seth Goldhammer @socalledseth.com : graylog.org/post/why-ai-...
Why AI Transformations in Security Fail Like New Year’s Gym Resolutions
Why enterprise AI in security is shifting from fast adoption to explainable, governed systems that SOC teams can trust, audit, and operate safely.
graylog.org
January 7, 2026 at 6:28 PM
Gyms fill in January, empty in February. Security AI mirrors it: fast launches, big promises—then analysts validate outputs. Skip explainability, governance, and context, and AI stalls. Seth Goldhammer @socalledseth.com : graylog.org/post/why-ai-...
Tupac had it right. “Momma told me there would be days like this, but I’m pissed, because it stays like this”
January 5, 2026 at 5:26 PM
Tupac had it right. “Momma told me there would be days like this, but I’m pissed, because it stays like this”
Whats worse, waking up early for an early morning meeting, or waking up for an early morning meeting to see it was cancelled?
December 19, 2025 at 3:23 PM
Whats worse, waking up early for an early morning meeting, or waking up for an early morning meeting to see it was cancelled?
New washer and dryer arrive Thurs and sort of sad that I am excited by it
December 16, 2025 at 9:44 PM
New washer and dryer arrive Thurs and sort of sad that I am excited by it
There’s a lot of unwarranted AI hype and appropriate backlash, so I was pleasantly surprised when I successfully tested if LLM + MCP with Graylog could accurately identify appropriate threat detections and required log sources based on threat actor tactics specific to industry and geography.
Is your #finserv institution as safe as it could be from #ransomware & other #cyberthreats? Groups like #FIN7, #LazarusGroup & #Carbanak often target #banks with attacks like SWIFT compromises. 🏦
But have no fear, #Graylog + Model Context Protocol are here to help! 🦸 💪
graylog.org/post/how-to-...
But have no fear, #Graylog + Model Context Protocol are here to help! 🦸 💪
graylog.org/post/how-to-...
How to Use MCP to Optimize Your Graylog Security Detections
Use Model Context Protocol (MCP) with Graylog to turn threat intelligence into prioritized, actionable security detections in seconds.
graylog.org
December 16, 2025 at 1:01 AM
There’s a lot of unwarranted AI hype and appropriate backlash, so I was pleasantly surprised when I successfully tested if LLM + MCP with Graylog could accurately identify appropriate threat detections and required log sources based on threat actor tactics specific to industry and geography.
Curry is amazing but relying on him to score 50 is not sustainable.
December 15, 2025 at 4:39 AM
Curry is amazing but relying on him to score 50 is not sustainable.
Had a dream that I came to take an exam unprepared so I had to take the test using my phone. Typing answers on the phone (about Red Rocks) was taking forever and full of typos, and was growing more concerned I wouldn’t be able to finish the test.
I haven’t been a student in over 20 years. WTH?
I haven’t been a student in over 20 years. WTH?
December 14, 2025 at 1:16 AM
Had a dream that I came to take an exam unprepared so I had to take the test using my phone. Typing answers on the phone (about Red Rocks) was taking forever and full of typos, and was growing more concerned I wouldn’t be able to finish the test.
I haven’t been a student in over 20 years. WTH?
I haven’t been a student in over 20 years. WTH?
Sometimes knowing what you don’t got is just as good as knowing what you got
Wordle 1,633 4/6*
⬛⬛⬛⬛⬛
⬛⬛⬛⬛⬛
🟩🟩🟩⬛⬛
🟩🟩🟩🟩🟩
Wordle 1,633 4/6*
⬛⬛⬛⬛⬛
⬛⬛⬛⬛⬛
🟩🟩🟩⬛⬛
🟩🟩🟩🟩🟩
December 8, 2025 at 6:55 PM
Sometimes knowing what you don’t got is just as good as knowing what you got
Wordle 1,633 4/6*
⬛⬛⬛⬛⬛
⬛⬛⬛⬛⬛
🟩🟩🟩⬛⬛
🟩🟩🟩🟩🟩
Wordle 1,633 4/6*
⬛⬛⬛⬛⬛
⬛⬛⬛⬛⬛
🟩🟩🟩⬛⬛
🟩🟩🟩🟩🟩
I wrote another article on AI and cybersecurity, drawing from Anthropic’s recent recognition of threat actors using agentic workflows. https://medium.com/the-visibility-layer/ai-led-cyberattack-shows-why-human-insight-still-matters-c839f77627e0
December 1, 2025 at 11:12 PM
I wrote another article on AI and cybersecurity, drawing from Anthropic’s recent recognition of threat actors using agentic workflows. https://medium.com/the-visibility-layer/ai-led-cyberattack-shows-why-human-insight-still-matters-c839f77627e0
Wow the league really hates Steph. How do you overturn that call?
November 27, 2025 at 5:28 AM
Wow the league really hates Steph. How do you overturn that call?
Busted: AI hype.
Hot: Hype about the AI bust.
My $.02 on how this impacts cybersecurity. medium.com/the-visibili...
Hot: Hype about the AI bust.
My $.02 on how this impacts cybersecurity. medium.com/the-visibili...
How Explainable AI Is Reshaping the Modern SOC
Seth Goldhammer, VP Product Management, Graylog
medium.com
November 21, 2025 at 8:36 PM
Busted: AI hype.
Hot: Hype about the AI bust.
My $.02 on how this impacts cybersecurity. medium.com/the-visibili...
Hot: Hype about the AI bust.
My $.02 on how this impacts cybersecurity. medium.com/the-visibili...
There is a 130% chance leftover rice will go all over your counter before it gets in the microwave
November 6, 2025 at 7:10 PM
There is a 130% chance leftover rice will go all over your counter before it gets in the microwave
New article medium.com/the-visibili...
Identifying Runtime Risk by Correlating Log Data with Vulnerability Reports
Seth Goldhammer, VP of Product Management, Graylog
medium.com
November 6, 2025 at 5:34 PM
New article medium.com/the-visibili...
I see a bad moon rising
November 6, 2025 at 1:46 AM
I see a bad moon rising
Happy #Graylog 7.0 Day! Excited about this release. Lots to unpack, read all about there (caution: loads of Thanksgiving puns you have been warned 😂)
graylog.org/post/gobblin...
graylog.org/post/gobblin...
Gobbling Up Insights: Graylog 7.0 Serves Up a Feast
Graylog 7.0 delivers smarter dashboards, guided remediation, AI insights, and cloud cost control for faster, clearer security operations.
graylog.org
November 3, 2025 at 7:45 PM
Happy #Graylog 7.0 Day! Excited about this release. Lots to unpack, read all about there (caution: loads of Thanksgiving puns you have been warned 😂)
graylog.org/post/gobblin...
graylog.org/post/gobblin...
Winnable game. Let’s go Warriors!
October 31, 2025 at 1:15 AM
Winnable game. Let’s go Warriors!