Getting Started with Sentinel Hunting: A KQL Primer for People Who Keep Putting It Off
Five operators, one mental model, and the discipline of never trusting a detection you can't read.
Practical writing on information security, Azure, cloud infrastructure, data and Power BI. Written from a decade-plus in security engineering, hybrid cloud and large-scale infrastructure.
Five operators, one mental model, and the discipline of never trusting a detection you can't read.
The identity seam, stale permissions, logging gaps and shared-responsibility confusion that hybrid environments accumulate.