Cloud Security Architecture & AI Defense

Stories, research, and engineering blueprints covering CSPM, Microsoft Defender for Cloud, and securing generative AI pipelines.

For you Latest

All Topics KQL Cloud Security Azure DevSecOps Entra ID Microsoft Sentinel AI Security Threat Hunting

Dikshant Lather · Sep 24, 2026

Why I Built My Own Blogging Platform Instead of Using WordPress

A security engineer's take on building a Medium-style platform from scratch: the constraints, the trade-offs, and what I'd do differently.

2 min read

1 0

Why I Built My Own Blogging Platform Instead of Using WordPress

Dikshant Lather · Sep 25, 2026

Hunting for Kerberoasting Attacks via Kerberos Service Ticket Requests (Event ID 4769)

Uncover Kerberoasting attacks targeting Active Directory Service Principal Names (SPNs) using KQL anomaly detection on Windows Security Event ID 4769.

Active Directory Security 2 min read

0 0

Hunting for Kerberoasting Attacks via Kerberos Service Ticket Requests (Event ID 4769)

Dikshant Lather · Sep 24, 2026

How to Secure Kubernetes Secrets Without Hardcoding Credentials

Protect Kubernetes credentials with RBAC, external secret managers, workload identity, scanning, rotation, and namespace isolation.

cloud-security 1 min read

0 0

How to Secure Kubernetes Secrets Without Hardcoding Credentials

Dikshant Lather · Sep 24, 2026

How to Reduce Azure Cloud Security Costs Without Removing Critical Controls

Reduce Azure security spending by measuring adoption, removing duplication, tuning telemetry, and preserving high-value security controls.

cloud-security 1 min read

0 0

How to Reduce Azure Cloud Security Costs Without Removing Critical Controls

Dikshant Lather · Sep 25, 2026

Hunting for Impossible Travel and Anomalous Token Sign-Ins in Sentinel

Detect geographic anomalies, session cookie theft, and impossible travel patterns across cloud user logins using geospatial distance calculation functions in KQL.

Identity Security 2 min read