Detection · Response · Security operations
Cybersecurity
SOC operations, identity controls, detection engineering, and practical security lessons from the field.
2 postsPosts in Cybersecurity
Cybersecurity 8 min read
Risk-based Conditional Access, the part most tenants skip
Most organisations stop at "require MFA for everyone" and call identity done. Entra ID Protection lets Conditional Access react to risk in real time — but only if you wire the signals into policy and actually work the queue.
29 May 2026
Cybersecurity 7 min read
Conditional Access isn't optional anymore
If you're running Microsoft 365 without Conditional Access policies, you have a significant identity risk that legacy MFA doesn't fully address. Here's where to start.
18 Jun 2025