About SIEM & Scheme

WHO WE ARE

Built by Defenders.
For Defenders.

SIEM & Scheme is the cybersecurity division of Pendergrass Consulting, an IT consulting firm based in Selma, North Carolina, in the heart of the Research Triangle. Backed by 20+ years of enterprise infrastructure and security experience, we specialize in blue team operations—building, deploying, and operating the defensive security infrastructure that keeps organizations safe from modern threats.

🏢 Pendergrass Consulting

Headquartered at 110 S. Massey St., Suite 201 in Selma, NC, Pendergrass Consulting provides a full spectrum of IT services: web development, custom applications, cybersecurity, cloud backup solutions, and managed IT services for small businesses across North Carolina and nationwide.

SIEM & Scheme was created to bring our deep infrastructure and security expertise to organizations that need dedicated blue team capabilities—without the overhead of building an in-house SOC from scratch.

👤 Engineering-Led Security

Our security operations are led by engineers who live in the environments they defend. We manage complex mixed infrastructure—Rocky Linux, CentOS, Debian, Windows Server, F5 BIG-IP load balancers, Cisco ASA firewalls, MSSQL and MariaDB databases, WildFly and Apache application servers, and Security Onion SIEM deployments.

This isn't theoretical cybersecurity. We build and operate the same tools we deploy for our clients: Security Onion with Elastic Fleet, Suricata IDS, Zeek, Strelka, CrowdStrike Falcon EDR, and Cisco ASA syslog integration—every day.

Technology Stack

TOOLS WE USE

SIEM Platforms

Security Onion 2.4, Elastic SIEM, Splunk, Wazuh, Grafana dashboards. Full deployment lifecycle from architecture through ongoing operations and tuning.

Detection & IDS

Suricata IDS, YARA rules, Sigma detections, Zeek network analysis, Strelka file scanning. Custom rules mapped to MITRE ATT&CK.

Endpoint Security

CrowdStrike Falcon EDR, Elastic Agent with Fleet enrollment, osquery, ClamAV. Cross-platform coverage for Linux, Windows, and mixed environments.

Infrastructure

F5 BIG-IP (GTM/LTM/WAF), Cisco ASA, Palo Alto PA-1410, Postfix mail infrastructure, nginx/Apache hardening, fail2ban, Greenbone/OpenVAS vulnerability scanning.

Compliance Frameworks

NIST 800-53, NIST 800-61, HIPAA, PCI-DSS, SOC 2, CIS Benchmarks. Audit-ready log retention and reporting.

Operating Systems

Rocky Linux 8/9/10, CentOS 7/8, Debian 11/12, RHEL, Windows Server 2016/2019/2022. Mixed environment specialists.

Built by Defenders.For Defenders.