This is a topic I find myself explaining regularly, especially when customers are migrating to the unified Defender experience and trying to understand how existing automation, ITSM integrations, and incident workflows will be affected. It’s one of my longer articles, but understanding alerts, incidents, and correlation is an important part of understanding how Microsoft Sentinel… Read More: Sentinel and Defender Incident Correlation »
I officially pre-registered for Black Hat USA 2026 and DEF CON today, and every year I find myself trying to recruit additional attendees from friends, coworkers, and peers across the cybersecurity community. One thing I hear repeatedly is that many people, especially those not sponsored by their employer, assume these conferences are financially out of… Read More: Hacker Week on a Budget: Black Hat-DEF CON »
I had a bit of downtime this week and decided to do some light vibe coding around an idea I have been curious about for a while: using Azure Maps as a way to visualize high-level security intelligence. Now in Public Release Most threat intelligence lives in tables, reports, and long write-ups. That format works… Read More: Exploring Azure Maps for Threat Actor Visualization »