github-actions
Lessons from the field. Always landing on my feet.
All
Cloud Security
Identity Security
Microsoft Sentinel
Microsoft Defender
AI Security
Detection Engineering
Threat Detection
Container Security
Entra ID
Zero Trust
DevSecOps
Infrastructure as Code
Agentic AI
2 posts
GigaWiper Detection as Code: Testing Custom Detections in Sentinel Repositories
Review update (September 25, 2026): The merged September 25 source now chooses a labeled executable identity from populated SHA1, then SHA256, then a normalized path; it excludes empty identity values. Its KQL semantic analysis and offline suite …
Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions
Review update (September 25, 2026): The merged-source publication verified the current image signature, SPDX SBOM and SLSA provenance at 2026-09-26 03:31:15 UTC (September 25 in America/Chicago). The digest is …