Practical, KQL-heavy lessons on Microsoft Sentinel and Entra ID security, covering detection rule tuning, log cost reduction and exposure from anonymous sharing links. Each issue critiques a common default or assumption and shows a concrete fix.

In-depth articles on Microsoft endpoint and identity security architecture, covering Conditional Access, Windows LAPS, and Intune, with design trade-offs and documented limitations. Includes field incident write-ups that trace a real production problem to its root cause and fix.

A researcher's newsletter on cloud and identity security, covering privilege escalation paths, service-account confused deputy problems and the effect of AI on vulnerability exploitation. Readers get technical write-ups of specific cloud flaws alongside opinionated commentary on the security industry.

Short engineering field notes on cloud infrastructure and CI/CD, built around concrete failures and fixes such as skipped deploy steps, build-time blog rendering and OIDC credentials. Each issue includes code snippets and a practical check or habit readers can adopt.