securityonfire
GhostShort, practical posts on Microsoft 365 and Microsoft Sentinel security operations, covering quirks like hidden admin groups, SPO proxy addresses and audit log queries. Readers get specific detection and investigation tips with example queries and links to further reading.