sentinel.blog
  • Home
  • Membership
  • Subscribers
  • About
  • Support
Sign in Subscribe
Automation

Automating the Automation

  • TobyG

TobyG

01 Oct 2025 • 6 min read
Share

This post is for subscribers only

Subscribe now

Already have an account? Sign in

Sentinel-As-Code: Wave 4, the docs nobody wanted to write

Nobody likes writing documentation. Even when you do write it, it starts dying the moment you save the file. Someone tweaks a setting in the portal, swaps a connector, changes a detection rule, and your carefully written workspace document is quietly drifting out of date for whoever reads it next.
03 Jun 2026 12 min read

Sentinel-As-Code: Wave 3

Wave 2 closed with one specific promise: end-to-end Pester tests wired in as a PR gate, with branch protection on main so nothing merged without a green run. Wave 3 lands that gate, plus a handful of other things that took shape alongside it. The short list of what'
13 May 2026 9 min read

Sentinel-As-Code: Wave 2

About a year ago I published Automating Microsoft Sentinel Deployment, a three-stage pipeline that provisioned infrastructure via Bicep and deployed Content Hub solutions through a single PowerShell script. It worked, but it was limited. Last month I released Wave 1 of the 2026 rebuild, a ground-up rewrite focused entirely on
28 Apr 2026 18 min read
sentinel.blog © 2026
  • Sign up
  • Crypto
  • Privacy
Powered by Ghost