Our news
-
Why Detection Engineering Strategy Is the Hidden Leadership Advantage in Modern Security
Detection engineering strategy is more than analytics rule creation. This post explores why leaders shape detection quality, how identity and signal design influence outcomes, and why modern security success depends on strategic engineering, not alert volume.
-
Why Modern Security Must Move Beyond Alerts and look at Signals
Modern security operations can no longer scale around alerts alone. This post explores why signal-driven SOC operations are essential for reducing noise, improving investigations, and enabling effective monitoring with platforms like Microsoft Sentinel.
-
Identity Is the New Security Control Plane
Modern security no longer scales around networks or tools. This post explores how identity-centric security architecture reshapes trust, access decisions, and monitoring, and why this shift directly impacts security operations and platforms like Microsoft Sentinel.
-
A New Year Reset for Security Leaders: From Announcements to Architecture
As security enters a new year, leaders face a shift that goes beyond tools and announcements. This post explores what recent industry direction reveals about identity, architecture, and the future of modern security leadership.
-
Reflecting on the Journey Since 2025 with Security Day with Mike: Thank you!
As we close another chapter and look back to when It’s Security Day with Mike! first launched in 2025, I want to take a moment to say Thank You This blog started with a simple goal: translate complex Microsoft security capabilities into practical, real world guidance for technical leaders and practitioners. What it’s grown into…
-
Microsoft Ignite 2025 Security Announcements: What Technical Leaders Need to Know
Microsoft Ignite 2025 introduced a major shift in enterprise security, focusing on AI governance, identity centric protection, and autonomous security operations. This post breaks down the most important Microsoft security announcements and what CISOs, Security Architects, and technical leaders need to know.
-
Simple Syslog Ingestion with Microsoft Sentinel Data Lake
Learn how to easily connect your Syslog collector VM, configure a Data Collection Rule, and validate real-time log ingestion into Microsoft Sentinel Data Lake. This step-by-step guide helps you streamline Syslog ingestion for scalable and cost-efficient security analytics.
-
How To Confidently Create Microsoft Sentinel data lake Custom Tables for Security Analytics
Learn how to confidently create custom tables in Microsoft Sentinel Data Lake using the Azure CLI. This step-by-step guide walks you through setup, schema verification, and switching your table to the Data Lake tier for cost-efficient, scalable security analytics management. Perfect for modern SOC and cloud security teams.
-
The Proven Way Sentinel Data Lake Slashes Cost
Introduction Security teams have long faced a tough challenge: balancing visibility with cost. A year ago, many organizations hesitated to adopt Microsoft Sentinel because of the high cost of the Analytics tier, forcing them to strip data down to the bare minimum. Microsoft listened. The Sentinel Data Lake tier is the proven way to slash…
-
Revolutionize Security Data Exploration with Microsoft Sentinel MCP Tools
Introduction Last week, we explored what Sentinel MCP is and how it integrates with Microsoft Sentinel. As security operations evolve at lightning speed, AI-driven workflows are becoming the cornerstone of modern SOCs. With Microsoft Sentinel MCP (Model Context Protocol), your team can harness agentic automation to interact with security data using natural language while maintaining…