Bartosz Wysocki

Why Abandoned Resources Are a Security Problem, Not Just a Billing One

Everything here is built on the work of Dolev Shor.

Sentinel Incident Email Alerts: Free Logic App with ARM Template

All right class One of the most common questions I&

Advanced Hunting Just Got a Lot More Powerful. You Can Now Act on What You Find.

All right class Hunting was always "find bad things

The Nag Machine: A Logic App That Badgers Your Team About Unowned Sentinel Incidents

All right class Today is a quick one so you

Your Crown Jewels Are in Defender. You Just Never Set Them Up.

All right class. You have been saying "crown jewels&

Building Your First Threat Hunting Hypothesis (The MITRE Way)

All right class. Lots of SOC teams say they do

Diagnostic Settings Manager Workbook

All right class This one is free to grab. No

Azure Key Vault: The High-Value Queries Your SOC Isn't Running

All right class. Key Vault is where your secrets live.

Hunting PowerShell Abuse in MDE: Eight Queries, Real Results

All right class PowerShell is in every serious Windows intrusion.

I Passed the GCDA. Here's What Nobody Tells You About SEC555

All right class. Three months of preparation, five books read