sentinel.blog
  • Home
  • Membership
  • Subscribers
  • About
  • Support
Sign in Subscribe

GitHub-Actions

A collection of 4 posts
Automation

Sentinel-As-Code: Wave 4, the docs nobody wanted to write

Nobody likes writing documentation. Even when you do write it, it starts dying the moment you save the file. Someone tweaks a setting in the portal, swaps a connector, changes a detection rule, and your carefully written workspace document is quietly drifting out of date for whoever reads it next.
03 Jun 2026 12 min read
SecDevOps

Sentinel-As-Code: Wave 3

Wave 2 closed with one specific promise: end-to-end Pester tests wired in as a PR gate, with branch protection on main so nothing merged without a green run. Wave 3 lands that gate, plus a handful of other things that took shape alongside it. The short list of
13 May 2026 9 min read
AzureDevOps

Sentinel-As-Code: Wave 2

About a year ago I published Automating Microsoft Sentinel Deployment, a three-stage pipeline that provisioned infrastructure via Bicep and deployed Content Hub solutions through a single PowerShell script. It worked, but it was limited. Last month I released Wave 1 of the 2026 rebuild, a ground-up rewrite focused
28 Apr 2026 18 min read
Automation

Sentinel Playbook Manager

One Script to rule them all, One Script to find them, One Script to bring them all, and in the SOC bind them. If you have ever tried to move a Microsoft Sentinel playbook from one tenant to another or from the portal into a Git repository you will know
24 Apr 2026 11 min read
Page 1 of 1
sentinel.blog © 2026
  • Sign up
  • Crypto
  • Privacy
Powered by Ghost