Dae'mon A.·Sep 27Kerberoasting in a Hybrid AD Lab: Attack It, Detect It in Sentinel, Then Crack ItPart two of my hybrid Active Directory detection lab. This one runs the full loop end to end: expose a service account, roast it from Kali…
Muhamad Adjie (MAD)·Jul 20The SecOps Architecture Trilogy: Part 3 — The Automation Layer: High-Speed Threat Containment &…If you have been following this series, you know we have systematically dismantled enterprise SIEM bloat. In Part 1 (The Edge Layer), we…
Muhamad Adjie (MAD)·Jul 15The SecOps Architecture Trilogy: Slaying SIEM Data Bloat with a Smart PipelinePart 1: How we redesigned on-premises ingestion to optimize cloud costs without losing security visibility.
Nimesh Panchal·May 14Microsoft Azure Sentinel: Deep-Dive into Analytics Policies, Automation Rules & Real-World SIEM…The Hook — When Your Cloud Gets Breached at 3 AM
InMeetCyberbyTHM{0x416469747961204D6163686972616A75}·Dec 11, 2025SOC Alert Triaging — Tinsel TriageInvestigate and triage alerts through Microsoft Sentinel.
Bappe Sarker·Dec 8, 2025KQL for Sentinel. Part -04Microsoft Sentinel is a cloud-native SIEM that becomes truly powerful when combined with Kusto Query Language (KQL). With KQL, analysts…
Bappe Sarker·Dec 7, 2025KQL Basics for Cybersecurity Part-02In part-01, i have shared basic 100 queries , in this part i will demonstrate next 100 queries.
Basi Reddy·Aug 5, 2025Anomalous Location Access: Detecting Impossible Travel in Hybrid Environments✍️ Author Highlights
InInfoSec Write-upsbySaikat Paul·Jun 5, 202525 Best Sentinel Automation Rules You Wish You knew Sooner25 Best Sentinel Automation Rules You Wish You knew Sooner
Truvis Thornton·Apr 28, 2025Advanced Microsoft Sentinel Workbook/Dashboard Design Concepts: color schemes, dynamic CSS content…Looking for ways to make your workbooks or dashboards more colorful and dynamic? These ideas may be what you need and allow you much more…A response icon1A response icon1
