Github-Actions
Lessons from the field. Always landing on my feet.
All
Cloud Security
Microsoft Sentinel
Identity Security
AI Security
Detection Engineering
Threat Detection
Microsoft Defender
Container Security
DevSecOps
Infrastructure as Code
Zero Trust
Agentic AI
Entra ID
Microsoft Entra
2 posts
GigaWiper Detection as Code: Testing the Sentinel Repositories Preview
Microsoft published its technical analysis of GigaWiper on July 9, 2026. Microsoft describes it as a modular backdoor with destructive capabilities, including scheduled-task persistence, RabbitMQ-over-AMQP command C2, Redis status and output …
Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions
Over the last couple of weeks, I’ve been diving deep into container supply chain security. Between high-profile incidents like SolarWinds, Log4Shell, and the xz Utils backdoor, it’s clear that securing the build pipeline is just as critical as …