Another day of Cybersecurity
If you’ve ever opened Entra ID logs in the middle of an analysis, you already know the pain. Thousands of JSON lines, timestamps in UTC, user IDs instead of names, and little to no context about what’s actually risky. It’s … Read the rest
The drive to integrate powerful AI tools, such as ChatGPT, into the enterprise environment with Microsoft 365 for enhanced productivity is not a new concept. This integration hides significant, emerging risks. A few security incidents, along with a few more … Read the rest
The future of the SOC is shifting from static dashboards and manual KQL queries toward intelligent, context operations powered by AI agents. AI-SOC is a journey, not something that can happen in a night!
Microsoft Sentinel’s integration with the MCP … Read the rest
I started working with the MCP about a year ago, and since then, I’ve built, developed, and deployed dozens of MCPs across different security platforms. My work has included hands-on implementations of both Microsoft Sentinel and Defender XDR, as well … Read the rest
Picture the classic castle and moat defense. For years, security teams believed that building high walls and deep moats could keep adversaries at bay. The logic seemed simple: if you fortify the perimeter, everything inside is safe. However, as attackers … Read the rest
Think of your enterprise as a fortified city, and each domain controller as a gatehouse. Microsoft Defender for Identity is like a watchtower built inside the gate, quietly observing everyone who passes through. It doesn’t rely on patrols or wall … Read the rest
When conducting a digital forensic investigation on macOS systems, understanding where to find critical artifacts and how to extract meaningful data is crucial. Unlike Linux, macOS uses unique system components and logging mechanisms that require specialized knowledge. This post highlights … Read the rest
In the modern Microsoft 365 threat landscape, SharePoint Online is no longer a document dump. It is a sprawling, API rich, over permissioned jungle wired into the core fabric of collaboration. With tight Graph API hooks, seamless integration with Teams, … Read the rest
