A few weeks ago, I had the opportunity to attend a small private conference where one of the speakers from DARPA shared the story behind the AI Cyber Challenge (AIxCC), a program I’ll discuss later in this article. Around the same time, I was researching many of these topics for work as organizations began asking… Read More: AI and the Future of Secure Code »
I was excited to see Microsoft embrace the OpenClaw concept at Build a few weeks ago with the introduction of a new service called Scout. I finally got around to spending some time with it this past week, and honestly, it’s been a pretty awesome experience. I actually had a blog post sitting in my… Read More: My Top 10 Vibe Coding Tips »
I was recently asked, how are automation rules managed in the Defender portal when multiple Sentinel workspaces are connected? I expected the answer to be simple. After all, I’ve spent a significant amount of time working with Sentinel, and not many things in this space come as a surprise anymore. I opened the Defender portal… Read More: Closer Look at Sentinel Automation in the Defender Portal »
Microsoft first announced Sentinel Data Lake in July 2025 and immediately generated a lot of interest across the security community. The value proposition was compelling: For many organizations, especially those collecting hundreds of gigabytes or even terabytes of data per day, Sentinel Data Lake looked like the next logical evolution of the platform. Then reality… Read More: Waiting for Sentinel Data Lake? »
This is a topic I find myself explaining regularly, especially when customers are migrating to the unified Defender experience and trying to understand how existing automation, ITSM integrations, and incident workflows will be affected. It’s one of my longer articles, but understanding alerts, incidents, and correlation is an important part of understanding how Microsoft Sentinel… Read More: Sentinel and Defender Incident Correlation »
I recently found myself needing to learn Microsoft Agent 365. Like most new Microsoft services, my first stop was the documentation. After an hour or two of focused reading, combined with some time in a lab environment clicking through the menus, I felt like I had a reasonably good understanding of what the service does… Read More: Agent 365: The Quick Version »
“Goddammit, Donut, quit typing in all caps.” “I AM NOT TYPING IN ALL CAPS, CARL. I AM USING AN AI CODING ASSISTANT. IT JUST THINKS EVERYTHING IS IMPORTANT.” That exchange never happened in Dungeon Crawler Carl, but after spending the last year vibe coding, it feels like it could have. Over the past year, I’ve… Read More: The Other 80% of Vibe Coding »
Have you heard about Microsoft’s new Claude Enterprise connector for Purview. At a high level, enterprise AI connectors are designed to collect and govern activity occurring within enterprise AI platforms. Depending on the platform and integration, that can include information such as user activity, utilization, prompts, responses, uploaded content, administrative actions, and other telemetry generated… Read More: Enterprise AI Connectors for Purview »
Recently, I found myself thinking about certification exams again. It had been several months since I last sat for a major certification exam, and while reviewing some of Microsoft’s newer AI certifications, I started asking myself a simple question: What should I take next? That led me down a rabbit hole of reviewing Microsoft’s current… Read More: Microsoft Security and AI Certification Roadmap »