GitHub-Actions - sentinel.blog

sentinel.blog

Sign in Subscribe

GitHub-Actions

A collection of 3 posts

Sentinel-As-Code: Wave 3

Wave 2 closed with one specific promise: end-to-end Pester tests wired in as a PR gate, with branch protection on main so nothing merged without a green run. Wave 3 lands that gate, plus a handful of other things that took shape alongside it. The short list of what'

Sentinel-As-Code: Wave 2

About a year ago I published Automating Microsoft Sentinel Deployment, a three-stage pipeline that provisioned infrastructure via Bicep and deployed Content Hub solutions through a single PowerShell script. It worked, but it was limited. Last month I released Wave 1 of the 2026 rebuild, a ground-up rewrite focused entirely on

Sentinel Playbook Manager

One Script to rule them all, One Script to find them, One Script to bring them all, and in the SOC bind them. If you have ever tried to move a Microsoft Sentinel playbook from one tenant to another or from the portal into a Git repository you will know