Skip to content
theschoonover.net
Resume

Deliverables

Published Application · US 2026/0277770 A1 2026

Systems and Methods for Anomaly Alerting for Data Feeds

Checks every event log in a data feed against its expected schema, stores the field errors alongside the event, and alerts when a feed's compliance drifts from its own historical baseline, so detections don't quietly lose the fields they depend on.

  • Flags missing, mistyped, malformed, and unsearchable fields at ingest and keeps that error context with the stored event.
  • Builds per-feed compliance metrics over cyclical windows, such as day of week, and sets alert thresholds from each feed's own history.
  • Anchors schemas to the fields that rules-based detections actually use.
  • Co-invented with Christina Carlson, Caleb Walch, and David Lazar. Filed March 2025; published September 2026.
Patent In-Flight

Criticality-Aware Drop Control for High-Throughput SIEM Pipelines

Maintains propagation of rare, high-value security events while managing volume through context-aware drop controls.

  • Balances noise reduction with the need to keep rare signals visible to downstream detections.
  • Adapts thresholds using rule context so critical events survive volume mitigation.