bicep
Lessons from the field. Always landing on my feet.
All
Cloud Security
Identity Security
Microsoft Sentinel
Microsoft Defender
AI Security
Detection Engineering
Threat Detection
Container Security
Entra ID
Zero Trust
DevSecOps
Infrastructure as Code
Agentic AI
2 posts
GigaWiper Detection as Code: Testing Custom Detections in Sentinel Repositories
Review update (September 25, 2026): The merged September 25 source now chooses a labeled executable identity from populated SHA1, then SHA256, then a normalized path; it excludes empty identity values. Its KQL semantic analysis and offline suite …
Just-In-Time Access for AI Agents: Building a ZSP Gateway in Azure
Review update (September 25, 2026): The merged September 25 source rejects ambiguous/dot-segment scopes and mismatched ARM response identities, uses explicit managed identity with closed SDK clients, and moves synchronous operations off the async …