Starting a Site with Hugo: Own the Place You Write
Part one of building a site you actually own. Why static, why this stack, and getting Hugo running on your machine in ten minutes.
Alan Conlon
Alan Conlon writes practical guides to Microsoft Sentinel, KQL threat hunting, Entra ID and Power BI, from over a decade in security engineering.
Latest articles
5 DAX Mistakes That Quietly Break Your Power BI Reports
Five silent DAX failures that can make Power BI measures and visuals disagree, and the defensive habits that stop them.
How Many SCUs Does Security Copilot Actually Need? Sizing Capacity Without the Bill Shock
How many SCUs Security Copilot needs: provisioned versus overage, hourly billing, the E5 allocation per 1,000 licences, and avoiding capacity cliffs.
Setting Up Microsoft Security Copilot: Capacity, Roles, and the Defaults That Bite
How to set up Microsoft Security Copilot: E5 auto-provisioning, prerequisites for provisioning capacity, SCUs, and default roles to fix on day one.
Hybrid Cloud Security: The Gaps Nobody Talks About Until It's Too Late
The identity seam, stale permissions, logging gaps and shared-responsibility confusion that hybrid environments accumulate.
Break-Glass Accounts: The Ones You Hope You Never Use, Done Properly
Entra break-glass (emergency access) accounts: cloud-only, excluded from every policy, watched closely, and tested before you need them.
Conditional Access: Getting It Right Without Locking Yourself Out
Break-glass first, report-only always, and the other habits that keep a Conditional Access rollout from ending in a lockout.
Hunting Password Spray in Sentinel: One Password Against a Thousand Doors
Brute force tries many passwords on one account. Spray tries one password on many accounts and hides under your lockout threshold.
Hunting MFA Fatigue in Sentinel: Building the Detection One Line at a Time
Push-bombing leaves a loud shape in SigninLogs. In Sentinel, a KQL count, a threshold and a join are enough to catch it.
