About

I've spent over a decade in the parts of enterprise IT where things quietly go wrong: the seams between on-premises and cloud, the permissions nobody cleaned up, the identity plumbing everyone assumes someone else is watching, and the dashboards everyone trusts until the numbers stop adding up. Security engineering, hybrid cloud and large-scale infrastructure delivery, mostly in environments where getting it wrong is expensive enough that you learn to be careful.

I write about that work at alanconlon.com, and this Hashnode publication carries copies of those posts. Nothing clever, nothing that only makes sense in a slide deck: just the controls that hold up under pressure, the detections you can read and defend at 2am, and the unglamorous discipline that separates a system you understand from one you're hoping is fine.

Everything here stays generic and educational. No specific employer, tenant or real incident, and nothing confidential.

• New posts every other Tuesday, by email: alanconlon.com
• Free KQL hunting queries: github.com/alanconlon/kql-hunting-queries
• LinkedIn and Bluesky