Work and family have kept life busy in the best ways. I finally carved out time for a GigaWiper detection-as-code lab with 5 Defender XDR rules, safe testing, and 3 custom alerts in one incident.
nineliveszerotrust.com/blog/gigawip...
#DefenderXDR #MicrosoftSentinel #KQL #DetectionEngineering #IaC
nineliveszerotrust.com
GigaWiper Detection as Code: Testing the Sentinel Repositories Preview
Build five GigaWiper detections in Bicep, evaluate the Sentinel Repositories preview, and safely validate three portal-native Defender XDR custom alerts.