Cybersecurity
Microsoft SC-200: Threat Hunting with Microsoft Sentinel
Threat hunting begins where ordinary alert processing ends. An alert tells the security team that a rule or product found…
Explore / Technology subjects
Cybersecurity
Cybersecurity architecture, identity, network defense, vulnerabilities, threat detection, risk and incident response.
The reading room
All insights
Latest in Cybersecurity
296 published articles in this category.
Cybersecurity
Microsoft SC-100: AI Security & Governance in Microsoft Environments
AI security in a Microsoft environment is not a new control category that sits beside identity, data, applications, and infrastructure.…
Cybersecurity
Microsoft SC-100: Application Security in the Microsoft Cloud
Application security in the Microsoft cloud is not a single product decision. It is a lifecycle problem that begins with…
Cybersecurity
Microsoft SC-100: Data Security with Microsoft Purview
Data security is often discussed as if the main job is preventing files from leaving the organization. In practice, the…
Cybersecurity
Microsoft SC-100: Identity Security with Microsoft Entra
Identity is the control plane for modern Microsoft environments. Users, administrators, applications, service principals, managed identities, external partners, devices, and…
Cybersecurity
Microsoft SC-100: Hybrid and Multicloud Security Architecture
Hybrid and multicloud security becomes difficult when each environment is treated as a separate island. Azure has one identity model,…
Cybersecurity
Microsoft SC-100: Defender XDR Architecture
Microsoft Defender XDR is an extended detection and response platform that correlates signals across multiple Microsoft security products so defenders…
Cybersecurity
Microsoft SC-100: Zero Trust Architecture Across Microsoft Cloud
Zero Trust is a security strategy, not a product bundle. Microsoft describes it through three principles: verify explicitly, use least…
Cybersecurity
Microsoft SC-200: Automating SOC Workflows with Sentinel Playbooks
Microsoft Sentinel playbooks turn repeatable incident-response procedures into Azure Logic Apps workflows. They can enrich incidents, notify teams, create tickets,…
Cybersecurity
Microsoft SC-200: Identity Threats with Defender for Identity
Identity attacks often use legitimate protocols, valid credentials, and ordinary administrative tools. That makes them difficult to distinguish from normal…
Cybersecurity
Microsoft SC-300: Phishing-Resistant MFA & Authentication
Multifactor authentication is now a baseline control, but not every MFA method offers the same resistance to modern attacks. Push…
Cybersecurity
Microsoft AI-102: Security Path After AZ-500
Microsoft retired AZ-500 and the Azure Security Engineer Associate certification on August 31, 2026. For candidates who had built a…
Cybersecurity
Microsoft AZ-305: Multi-Tenant Identity Design in Azure
Multi-tenant identity design is difficult because the word “tenant” can describe two different things. In a SaaS application, a tenant…
Cybersecurity
Microsoft AZ-400: Secure Secrets in Azure DevOps Pipelines
The safest pipeline secret is the secret the pipeline no longer needs to store. Azure DevOps can use workload identity…
Cybersecurity
IAPP AIGP: AI Governance Programs for Privacy and Risk Teams
AI governance becomes operational when an organization can identify where AI is used, classify the resulting risk, assign accountable owners,…