3 min read
Practical KQL query patterns for uncovering anomalous authentication, privilege escalation, and lateral movement in Microsoft Sentinel SIEM.
Microsoft SentinelKQLThreat HuntingSOCSIEM
Technical Writing
Blog & Security Notes
Technical writeups, threat hunting guides, detection engineering analysis, and cloud infrastructure architectures.
3 min read
A deep dive into implementing zero-trust principles in cloud environments: mutual TLS, workload identity federation, and dynamic authorization policies.
Zero-TrustCloud SecuritymTLSIAM
3 min read
A practical guide to securing GitHub Actions workflows: OIDC token authentication, pinned SHAs, least-privilege permissions, and secret management.
DevSecOpsGitHub ActionsCI/CDCloud Security