PS, here’s what I learned
I’m Pit Singert, a Security Architect and Consultant writing about Azure, Defender, Sentinel, KQL, containers, and the emerging world of AI-powered security.
Explore by topic
Deep dives, practical walkthroughs, and lessons learned from real cloud and security work.
Curated reading
A few practical guides for understanding the themes I write about most.
If you work with Microsoft Sentinel and Defender, you probably already have response playbooks: Teams cards, approval emails, incident updates. Whe...
Read article →An incident usually arrives with more than one interesting object attached to it - a user, a URL, a device, perhaps an IP address as well. The usef...
Read article →While flattening the Defender role definitions for Defender for Cloud - Built-in Azure Roles and Permissions, seven roles fell out of Get-AzRoleDef...
Read article →A little context
I’m a Security Architect and Consultant from Germany with more than 15 years in IT, including almost 10 years at Microsoft. This blog is where I document the details, patterns, and lessons that are useful beyond a single project.
More about me →Selected consulting projects and professional collaborations are welcome.