Github-Actions

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel AI Security Detection Engineering Microsoft Defender Threat Detection Entra ID Container Security Zero Trust DevSecOps Infrastructure as Code Agentic AI 2 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Detection Engineering

GigaWiper Detection as Code: Testing the Sentinel Repositories Preview

Microsoft published its technical analysis of GigaWiper on July 9, 2026. Microsoft describes it as a modular backdoor with destructive capabilities, including scheduled-task persistence, RabbitMQ-over-AMQP command C2, Redis status and output …

29 min read Read more →
DevSecOps

Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions

Over the last couple of weeks, I’ve been diving deep into container supply chain security. Between high-profile incidents like SolarWinds, Log4Shell, and the xz Utils backdoor, it’s clear that securing the build pipeline is just as critical as …

9 min read Read more →