Cloud Security Architecture & AI Defense

Dikshant Lather · Sep 24, 2026

How to Send AWS CloudTrail Logs to Microsoft Sentinel

Build a practical AWS-to-Sentinel logging path for centralized cloud detection, investigation, and incident response.

cloud-security 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Spotting Web Shell Execution: Web Server Spawning Suspicious Child Processes

Detect web server compromises and web shell activity by identifying suspicious interactive shells spawned by IIS (w3wp.exe), Nginx, or Apache.

Endpoint Detection 2 min read

0 0

Dikshant Lather · Sep 24, 2026

How to Detect and Block Prompt Injection in RAG Applications

Defend RAG applications against prompt injection with retrieval authorization, trust boundaries, tool restrictions, testing, and monitoring.

AI 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Detecting Defender Antivirus Tamper Protection Disablement and Registry Evasion

Alert when ransomware or attackers attempt to disable Microsoft Defender Real-Time Monitoring and Antivirus via registry tampering.

Endpoint Detection 2 min read

0 0

Dikshant Lather · Sep 24, 2026

How to Build a Secure AI Gateway for LLM Applications

Design an AI security gateway with authentication, rate limits, RAG authorization, tool controls, output checks, logging, and cost monitoring.

AI 1 min read

0 0

Dikshant Lather · Sep 24, 2026

How to Build a Secure GitHub Actions CI/CD Pipeline for Azure

Secure GitHub Actions deployments to Azure with OIDC, least privilege, security scanning, protected environments, and production approvals.

devsecops 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Uncovering Malicious Windows Service Installation via Event ID 7045 and Defender KQL

Catch lateral movement and persistence tools (PsExec, Cobalt Strike PsExec service) by monitoring new Windows Service installations with KQL.

Threat Hunting 2 min read

0 0

Dikshant Lather · Sep 25, 2026

Detecting DNS Tunneling and High-Volume Data Exfiltration with Sentinel KQL

Uncover covert C2 communication channels and DNS data exfiltration using string length thresholds and subdomain entropy analysis in KQL.

Network Security 2 min read

0 0