Library - Topic
Articles open in this browser tab. Some require sign-in.
Modern breach is no longer a sequence of discrete alerts. It’s a path: identity → token → device → cloud control plane → data plane → sensitive information. And the only reliable way to interrupt that path early is to understand, continuously, how the estate is connected.
Dec 17, 2025
Part 3 is addressing the inevitable next question: how do we govern AI itself so copilots and agents don’t become the newest - and quietest - exfiltration path? This is not a tooling problem. It’s a control problem.
Dec 12, 2025
"Are we ready for the inevitable?". Part 2 is my practical answer: a human-in-control model where built-in intelligence across the Microsoft security stack and Security Copilot agents do the heavy lifting across identity, endpoints, data, cloud, and apps, all under clear guardrails.
Nov 14, 2025
Part 1 of a multi-part series: how unified SIEM+XDR, AI, and agents shift security to human-on-the-loop operations—automatic disruption, graph-based triage, and governed action.
Nov 03, 2025
