sentinel.blog

Home
Membership
Subscribers
About

Sign in Subscribe

DefenderXDR

Managing Microsoft Defender XDR Custom Detection Rules at Scale

TobyG

13 Aug 2025 • 5 min read

This post is for subscribers only

Subscribe now

Already have an account? Sign in

It's Okay, Not Be Okay

Sometimes the hardest thing isn't what you're going through it's admitting you need help. There's no easy way to start this post. I've written and rewritten this several times now, trying to find the right words. But I think that&

24 Feb 2026 7 min read

ConsentFix: Securing Your Tenant Against OAuth Authorisation Code Theft

There's a new OAuth attack making the rounds that's caught the attention of security professionals. ConsentFix (sometimes called AuthCodeFix) exploits a design quirk in how Microsoft first-party applications handle OAuth flows, and it's very effective. There is a straightforward mitigation that takes about five

12 Jan 2026 12 min read

Becoming the Puppet Master of an AI SOC team

I released a Model Context Protocol server called KQL Search MCP last week. The idea was stop manually searching through GitHub repositories every time I needed a KQL query. It search thousands of queries from all GitHub repos, validates them against table schemas, and can even generate new queries from

18 Dec 2025 5 min read

sentinel.blog © 2026

Sign up
Crypto
Privacy

Powered by Ghost