Back

securityonfire

Ghost
securityonfire.blog· irregular· Inactive for over a year

Short, practical posts on Microsoft 365 and Microsoft Sentinel security operations, covering quirks like hidden admin groups, SPO proxy addresses and audit log queries. Readers get specific detection and investigation tips with example queries and links to further reading.

microsoft sentinelm365office 365entra idkqlincident responseexchange onlineunified audit logthreat detectionsoc analyst
Platform
Ghost
Frequency
Irregular
Latest issue
Oct 20, 2023
Language
English
Written for
SOC analysts and M365 security engineers
Tone
practical
Tracked since
Oct 24, 2026

Website: https://www.securityonfire.blog/