Another day of Cybersecurity
The future of the SOC is shifting from static dashboards and manual KQL queries toward intelligent, context operations powered by AI agents. AI-SOC is a journey, not something that can happen in a night!
Microsoft Sentinel’s integration with the MCP … Read the rest
I started working with the MCP about a year ago, and since then, I’ve built, developed, and deployed dozens of MCPs across different security platforms. My work has included hands-on implementations of both Microsoft Sentinel and Defender XDR, as well … Read the rest
Picture the classic castle and moat defense. For years, security teams believed that building high walls and deep moats could keep adversaries at bay. The logic seemed simple: if you fortify the perimeter, everything inside is safe. However, as attackers … Read the rest
Think of your enterprise as a fortified city, and each domain controller as a gatehouse. Microsoft Defender for Identity is like a watchtower built inside the gate, quietly observing everyone who passes through. It doesn’t rely on patrols or wall … Read the rest
When conducting a digital forensic investigation on macOS systems, understanding where to find critical artifacts and how to extract meaningful data is crucial. Unlike Linux, macOS uses unique system components and logging mechanisms that require specialized knowledge. This post highlights … Read the rest
In the modern Microsoft 365 threat landscape, SharePoint Online is no longer a document dump. It is a sprawling, API rich, over permissioned jungle wired into the core fabric of collaboration. With tight Graph API hooks, seamless integration with Teams, … Read the rest
A digest of AI security research, insights, reports, upcoming events, and tools & resources. Follow the AI Security community on Twitter and the LinkedIn group for additional updates.
Sponsored by CyberBiz and InnovGuard.com – Technology Risk & Cybersecurity Advisory – … Read the rest
Microsoft Entra ID’s CFIR (Cloud Forensic and Incident Response) provides a solid blueprint for detecting, investigating, and responding to identity threats. However, mastering it requires the right tools and approach. That’s where PowerShell steps in.
In this post, we’ll explore … Read the rest
