zero-trust
Lessons from the field. Always landing on my feet.
From Authorization to Action: Operationalizing CISA's Microsoft Cloud Logs Playbook in Sentinel
Review update (September 25, 2026): The January 15, 2025 publication date is supported by CISA’s original release notice; the resource landing page now emphasizes the later revision date. Review update (September 25, 2026): For cost planning, …
Copy Fail in the Cloud: A Defender, Sentinel, and AKS Response Guide for CVE-2026-31431
Review update (September 25, 2026): The retained Sentinel/AKS evidence was captured May 2, 2026, without executing Copy Fail exploit code. The May 3 CVE/KEV snapshot remains historical; its May 15 due date has passed. Recheck the live NVD record and …
Block Prompt Injection at the Network Layer with Microsoft Entra Prompt Injection Protection
Review update (September 25, 2026): Generative AI Insights remains preview and can retain full prompts with user identity. Set access, retention and user-notice policy before enabling it. Portal screenshots below are retained from the March 2026 …
March–June 2026 Entra ID Changes: Passkey Profiles and Conditional Access Enforcement
Review update (September 25, 2026): Resource links to older third-party rollout summaries are historical background. Use current Microsoft guidance and the actual tenant Message Center notice for dates/cloud scope. The Baseline scopes settings link …
Just-In-Time Access for AI Agents: Building a ZSP Gateway in Azure
Review update (September 25, 2026): The merged September 25 source rejects ambiguous/dot-segment scopes and mismatched ARM response identities, uses explicit managed identity with closed SDK clients, and moves synchronous operations off the async …
Sentinel MCP Server: Securing Your SOC's New AI Attack Surface
Review update (September 25, 2026): The walkthrough captures show January 6, 2026 evidence and an earlier tool inventory. The related detection lab is a source-reviewed identity/activity lab; it does not by itself prove ingestion or coverage of …
Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions
Review update (September 25, 2026): The merged-source publication verified the current image signature, SPDX SBOM and SLSA provenance at 2026-09-26 03:31:15 UTC (September 25 in America/Chicago). The digest is …
Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State
Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections …
Securing the Agentic Workforce: Microsoft's Zero Trust for AI Agents
Status update, August 13, 2026: Microsoft Agent 365 is generally available for commercial customers, effective May 1, 2026, and the Microsoft Entra Agent ID platform reached GA in April 2026. The Ignite 2025 rollout history below remains useful …
Welcome to Nine Lives, Zero Trust
Review update (September 25, 2026): The topics listed here are the intended editorial scope, not a claim that every topic already has a published article. See the Topics page for present coverage. The Zero Trust model is described in NIST SP …