Container-Security
Lessons from the field. Always landing on my feet.
All
Cloud Security
Microsoft Sentinel
Identity Security
AI Security
Detection Engineering
Microsoft Defender
Threat Detection
Container Security
Entra ID
DevSecOps
Infrastructure as Code
Zero Trust
Agentic AI
2 posts
Agent 365 Launch Playbook: I Tested the Defender Response for AI Agent Attacks
Microsoft announced that Agent 365 would become generally available on May 1, 2026. Most launch-week posts explain what it is. I wanted to answer a different question: What does an AI agent attack look like in a real Microsoft defender stack as Agent …
AKS Runtime Security: Binary Drift, Anti-Malware & Gated Deployment with Defender for Cloud
In December, I published a post on securing the container supply chain — SBOM generation, image signing, and build provenance with GitHub Actions. That covered build-time security: making sure the image you ship is the image you built. But what …