Scanner

@scanner_dev

Scanner makes data lakes fast and easy to use, giving teams more detection and response power. Schemaless log search indexing, all in the user’s S3 buckets.

San Francisco

Joined August 2022

170Following

67Followers

Pinned

Scanner@scanner_dev · Jun 9

Big news: Scanner.dev is hitting the stage at @BlueTeamCon 2025 Cliff’s heading to Chicago this Sept to talk AI + SecOps — specifically, how modern security teams can boost productivity without burning out. Let’s connect IRL: 🔗 blueteamcon.com/directory/ai-a…

scanner_dev's tweet card. Learn more about our BTC 2025 talk: AI as the SOC Sidekick: Streamlining Security Without Stepping Over Humans.

327

Scanner@scanner_dev · Jun 27

Legacy SIEMs: all noise, no signal. Scanner: built for teams who actually want to fix things. - 1,000s of useless alerts? Nope. - Context first. Triage in seconds. That’s why @tryramp, @getpostman & @Lemonade_Inc ditched the bloat. 🔗 blog.scanner.dev/why-fast-movin…

scanner_dev's tweet card. Fast-moving security teams choose Scanner to cut alert noise, enrich signals in real time, and respond faster—without the bloat of legacy SIEMs.

Scanner@scanner_dev · Jun 23

Resetting MFA at 3AM? Logging in from two continents in an hour? If it's in your Okta logs, it's worth investigating. New guide: How to build a real detection pipeline from Okta → Grove → Substation → Scanner. Here is the full guide: blog.scanner.dev/monitoring-okt…

scanner_dev's tweet card. This knowledge base article provides a step-by-step guide to monitoring Okta System Logs for threat detection. Learn how to collect logs via API, enrich them using Substation, and analyze them with...

Scanner@scanner_dev · May 15

Awesome product, @cotoolai! And thanks for the shoutout at 0:34! 😀 Teamwork makes the dream work

YY Combinator@ycombinator · May 14

Cotool (@cotoolai) is an agentic security platform that eliminates manual and repetitive work for security teams. It helps teams investigate faster, automates common tasks, and documents work in seconds. ycombinator.com/launches/NW2-c… Congrats on the launch, @maxpollard415,…

881

Scanner@scanner_dev · Apr 23

Changelog: You can now transform your logs as they flow into your Scanner indexes. - Add normalized Elastic Common Schema (ECS) fields to popular log source types. - Auto-parse JSON strings and "key=value" pairs. - And more... Transformers - more than meets the eye.

187

Scanner Retweeted

Cliff Crosland@CliftonCrosland · Feb 21

anyone using data lakes for their logs? doing an info session next week about good methods we're seeing these days, particularly what detection & response teams are doing. come share how you do things! scanner.dev/events/data-la…

129

Scanner@scanner_dev · Feb 5

New Feature Announcement: 🔍Visual Query Builder – Build & switch between visual & text queries seamlessly. Auto-complete & easy visualization included! 🛡️ MITRE-Tagged Detection Rules – Organize & analyze rules with built-in & custom tags. Learn more: bit.ly/40Msfql

scanner_dev's tweet card. The new query builder provides a visual alternative to writing raw query syntax allowing users to switch between text and visual modes.

Scanner@scanner_dev · Jan 23

Join our hands-on webinar Jan 30 to learn how to streamline and deploy security detections with Scanner's schemaless log search index in your S3 bucket. UI & code-first approaches, GitHub integration—no complex schemas or heavy engineering. bit.ly/4h3h6IH

scanner_dev's tweet image. Join our hands-on webinar Jan 30 to learn how to streamline and deploy security detections with Scanner's schemaless log search index in your S3 bucket. UI &amp; code-first approaches, GitHub integration—no complex schemas or heavy engineering. bit.ly/4h3h6IH

Scanner@scanner_dev · Jan 16

Announcing a major expansion of Scanner's detection capabilities with ready-to-use rules across 12 critical log sources bringing our total to 214 detection rules, covering 11 MITRE ATT&CK tactics and 45 techniques. bit.ly/4jjriyb

scanner_dev's tweet card. Announcing a major expansion of Scanner's detection capabilities bringing our total to 214 detection rules, covering 11 MITRE ATT&CK tactics and 45 techniques

Scanner@scanner_dev · Jan 15

Explore the key benefits of Security Data Lakes, including advanced use cases for threat hunting, streamlined detection and response workflows, and their role in GenAI-powered analysis. bit.ly/40coiuO

scanner_dev's tweet image. Explore the key benefits of Security Data Lakes, including advanced use cases for threat hunting, streamlined detection and response workflows, and their role in GenAI-powered analysis. bit.ly/40coiuO

Scanner@scanner_dev · Nov 19

Struggling with Datadog log costs? Security teams face challenges balancing Standard Logs, Flex Logs & Cloud SIEM. Learn how @scanner_dev helps optimize performance and detections, cuts costs, and enhances @datadoghq's power & efficiency. bit.ly/4fwSqHD

scanner_dev's tweet image. Struggling with Datadog log costs? Security teams face challenges balancing Standard Logs, Flex Logs &amp; Cloud SIEM. Learn how @scanner_dev helps optimize performance and detections, cuts costs, and enhances @datadoghq's power &amp; efficiency. bit.ly/4fwSqHD

119

Scanner@scanner_dev · Nov 13

The @scanner_dev Playground is live! Dive into an interactive demo with AWS CloudTrail logs to experience a full threat investigation scenario. Sign up now and start exploring at scanner.dev/demo. bit.ly/4fKBlde

scanner_dev's tweet card. The Playground is a hands-on, interactive way to try Scanner, walking users through a complete threat investigation using cloud audit logs.

Scanner@scanner_dev · Aug 22

Congrats to the Scanner team for launching Detection Rules As Code! Our users can now manage detection rules directly in their own GitHub repos, improving collaboration, change management, continuous delivery, and streamlining threat detection development bit.ly/3XgZbqE

scanner_dev's tweet image. Congrats to the Scanner team for launching Detection Rules As Code! Our users can now manage detection rules directly in their own GitHub repos, improving collaboration, change management, continuous delivery, and streamlining threat detection development bit.ly/3XgZbqE

Scanner@scanner_dev · Jul 11, 2024

Announcing the release of Scanner for @ProjectJupyter, allowing users to analyze & visualize years of logs using Jupyter notebooks via the Scanner Python SDK for Response-as-Code and Advanced threat hunting on historical logs bit.ly/3W2KdCu

scanner_dev's tweet image. Announcing the release of Scanner for @ProjectJupyter, allowing users to analyze &amp; visualize years of logs using Jupyter notebooks via the Scanner Python SDK for Response-as-Code and Advanced threat hunting on historical logs bit.ly/3W2KdCu

Scanner@scanner_dev · May 8, 2024

Our co-founders @CliftonCrosland and Steven Wu kicked off our first day at #RSAC with so many great conversations with security leaders from all over the globe that came to learn more about @scanner_dev. Come visit us at the Early Stage Expo tomorrow or Thursday. See you there!

scanner_dev's tweet image. Our co-founders @CliftonCrosland and Steven Wu kicked off our first day at #RSAC with so many great conversations with security leaders from all over the globe that came to learn more about @scanner_dev. Come visit us at the Early Stage Expo tomorrow or Thursday. See you there!

132

Scanner@scanner_dev · May 2, 2024

Announcing Scanner for Splunk which makes it easy to leverage logs in S3 for advanced threat hunting and detection - all while staying entirely within the Splunk UI. Teams can now gain visibility into historical & high-volume logs while saving up to 80-90% bit.ly/3UkebRD

scanner_dev's tweet card. Scanner for Splunk allows users to leverage logs in S3 for advanced threat hunting and detection while staying entirely within the Splunk UI.

Scanner@scanner_dev · Apr 9, 2024

Introducing our new Threat Detection Rules to help alert teams whenever there are misconfigs, indicators of compromise, and various kinds of threat activity. Teams can even chain detections together w/ Jupyter notebooks to investigate advanced threats bit.ly/3VQ37Ow

scanner_dev's tweet card. Learn about Scanner's new threat detection rules, chaining, and how they can protect your Redis server from mining bitcoin for North Korea.

Scanner Retweeted

Cliff Crosland@CliftonCrosland · Jan 3, 2024

whatever you do this year, please try not to spend half a million dollars on logs bit.ly/3tx0A0b

319