Sentinel-As-Code - sentinel.blog

sentinel.blog

Sign in Subscribe

Sentinel-As-Code

A collection of 5 posts

Sentinel-As-Code

Sentinel as Code Toolkit

The VS Code extension that used to be SentinelCodeGuard shipped its biggest release: coverage of every Sentinel content type, first-class Defender XDR authoring, and a connector catalogue rebuilt from Microsoft's own source data.

Sentinel-As-Code

Sentinel-As-Code 26.07: From Markdown to the Boardroom

Sentinel-As-Code 26.07 renders the Documenter's daily Markdown inventory into a styled Word (.docx) report: numbered table of contents, colour-coded severity tables, and 42 gap-analysis rules across MITRE ATT&CK, cost, and hygiene. Here's what's in it, and what the same day's other pushes mean.

Sentinel-As-Code: Wave 4, the docs nobody wanted to write

Nobody likes writing documentation. Even when you do write it, it starts dying the moment you save the file. Someone tweaks a setting in the portal, swaps a connector, changes a detection rule, and your carefully written workspace document is quietly drifting out of date for whoever reads it next.

Sentinel-As-Code: Wave 3

Wave 2 closed with one specific promise: end-to-end Pester tests wired in as a PR gate, with branch protection on main so nothing merged without a green run. Wave 3 lands that gate, plus a handful of other things that took shape alongside it. The short list of

Sentinel-As-Code: Wave 2

About a year ago I published Automating Microsoft Sentinel Deployment, a three-stage pipeline that provisioned infrastructure via Bicep and deployed Content Hub solutions through a single PowerShell script. It worked, but it was limited. Last month I released Wave 1 of the 2026 rebuild, a ground-up rewrite focused