Cloud Security Architecture & AI Defense

Dikshant Lather · Sep 25, 2026

Detecting Brute Force Attacks Followed by Successful Logon in Microsoft Sentinel

Correlate failed sign-ins followed by a successful authentication within a short time window to immediately flag compromised user accounts.

Incident Response 2 min read

0 0

Dikshant Lather · Sep 24, 2026

How to Replace Azure Service Principal Secrets with Workload Identity

Replace long-lived Azure service principal secrets with workload identity federation and reduce credential exposure in modern CI/CD.

cloud-security 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Detecting Suspicious Base64 Encoded PowerShell Commands with Defender XDR KQL

Halt fileless execution and command obfuscation by spotting encoded PowerShell flags (-enc, -encodedcommand) with Defender for Endpoint KQL queries.

Endpoint Detection 2 min read

0 0

Dikshant Lather · Sep 24, 2026

How to Stop Secrets From Reaching GitHub Repositories

Prevent API keys, tokens, passwords, and cloud credentials from reaching GitHub using layered secret scanning and short-lived identity.

devsecops 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Detecting Shadow IT and Massive Cloud Storage Uploads in Enterprise Networks

Monitor unauthorized data transfers to personal cloud storage providers (MEGA, Dropbox, WeTransfer) using byte-count aggregation in KQL.

Network Security 1 min read

0 0

Dikshant Lather · Sep 25, 2026

Detecting MFA Fatigue and Push Notification Bombing in Microsoft Entra ID

Catch MFA push notification bombing attacks where attackers trigger repeated authentication requests until the victim accidentally approves access.

Identity Security 2 min read

0 0

Dikshant Lather · Sep 24, 2026

LLM Prompt Injection: How to Secure AI Applications Against Attacks in 2026

Prompt injection can manipulate LLM behavior, leak data, or trigger unauthorized actions. Learn how to design layered defenses for secure AI applications.

AI 6 min read

0 0

Dikshant Lather · Sep 25, 2026

Identifying Rogue Azure Subscription Role Assignments and Privilege Escalation

Monitor high-privilege Azure RBAC grant operations (Owner, Contributor, User Access Administrator) in AzureActivity logs using proactive KQL alert rules.

Cloud Security 2 min read

0 0