David Swift

A 25+ year industry veteran, David is a cybersecurity strategist and platform evangelist at Netenrich. Most recently, he was Principal Architect at Securonix. Prior companies include Accuvant, Dell, Fortinet, and IBM. He has consulted to Microsoft, Apple, Visa, Chevron, and Amex and has authored publications and articles on cybersecurity. He holds a BSBA from the University of Texas at Dallas and and holds numerous certifications.

3 min read

SIEM vs. SOAR: The Right Security Tool

Security information and event management (SIEM) and security orchestration, automation, and response (SOAR) are complementary solutions.

Security Operations Security Analytics Automation & SOAR MDR & Managed Services

KEEP READING

SIEM 101 – Best Practices for Implementation

4 min read

SIEM 101 – Best Practices for Implementation

Security information and event management (SIEM) is about collecting,...

Threat Intelligence Security Operations Security Analytics Detection Engineering

KEEP READING

UEBA, It's Just a Use Case

3 min read

UEBA, It's Just a Use Case

"UEBA, it’s just a use case." – Netenrich CISO Chris Morales

He’s not wrong....

Threat Intelligence Security Analytics Detection Engineering

KEEP READING

Want to Optimize Threat Detection & Response? 5 Patterns vs. 500 Rules

4 min read

Want to Optimize Threat Detection & Response? 5 Patterns vs. 500 Rules

One vendor uses 5 patterns, the other uses 500 rules. What’s better?

Anyone...

Security Operations Security Analytics Detection Engineering MDR & Managed Services

KEEP READING

4 min read

Detecting Advanced Persistent Threats (APT) via Sequences

Aug 13, 2026 by Raju Chekuri

Sophisticated adversaries design their individual actions to be unremarkable. A...

4 min read

How Continuous Security Monitoring Exposes Blind Spots

Aug 10, 2026 by Raju Chekuri

There is a framework for thinking about what you know and don't know about the...

5 min read

LLM Grounding: Why RAG Transforms Enterprise AI Security

Aug 6, 2026 by Raju Chekuri

The most common failure mode I observe in LLM deployments for security...

7 min read

The 3-minute Heist: Securing Modern Environments against Cloud Data Exfiltration.

Jun 9, 2026 by Suma Ballal

Modern cloud environments have fundamentally changed how enterprise data is...

7 min read

Non-Human Identity Security: Why Defending NHIs Requires Detection and Posture Working Together

Jun 9, 2026 by Suma Ballal

Non-Human Identities (NHIs)—service accounts, automation tokens, CI/CD pipeline...

5 min read

Revolutionizing Telemetry: Announcing Praxis Intelligent Data Pipeline Management by Netenrich for Google SecOps

Jun 5, 2026 by Netenrich

As modern enterprises scale, their security operations inevitably face a...

24 min read

CI/CD Pipeline Hijacking: 5 Attack Vectors & Threat Hunting

Aug 6, 2026 by Asritha Narina

Deconstructing automated build runner exploitation, real-world case studies,...

15 min read

Deconstructing npm Registry & Supply Chain Attacks | Netenrich

Jul 31, 2026 by Asritha Narina

Modern JavaScript/TypeScript development relies on composing applications...

8 min read

When Trust Becomes the Attack Surface: Understanding Modern Software Supply Chain Attacks

Jul 15, 2026 by Asritha Narina

Most enterprise applications today are more integration projects than original...

As seen on