[ Insights ]

Technical notes from our SOC.

How we build detection, response and compliance on Microsoft 365, written for the people who have to run it.

· Managed detection & response · 10 min read

MDR for Microsoft Sentinel: architecture, detection engineering and containment

MDR on Microsoft Sentinel: AMA and DCR pipelines, KQL detection-as-code and token-theft containment that turn a SIEM into a response capability.

Read the article →