Browse by topic
Security Automation
Security automation that replaces repeatable manual work, including a phishing triage pipeline built on Power Automate and Python, an Entra ID account and privilege audit that cross-references onboarding and offboarding tickets, and a CI rule tested against two ways to reuse a privileged token.
4 posts
-
3 min read
Auditing Entra ID Accounts and Privileges Without PowerShell Dependencies
Entra ID audit automation: cross-reference accounts against onboarding and offboarding tickets and verify AI Administrator and Security Administrator roles.
- Identity
- Security Automation
-
6 min read
Two ways to reuse a privileged CI token (and my rule only caught one)
A GitHub Actions workflow_run rule that caught only one of two attack shapes, checkout reuse and artifact reuse, and how I split it into MCP019 and MCP020.
- Security Engineering
- Security Automation
-
3 min read
Automating Enterprise Phishing Triage: SPF, DKIM, DMARC, and Raw Email Extraction
How I automated phishing triage with raw .eml and .msg extraction, SPF, DKIM and DMARC alignment checks, and a KnowBe4 PAB to PhishER webhook pipeline.
- Email Security
- Security Automation
-
Medium ↗
How I Stopped Manually Reading Email Headers and Built a Phishing Analyzer That Does It For Me
A Mini-SOC automation pipeline with Microsoft Power Automate, KnowBe4 PhishER, and Freshservice that cut phishing triage from minutes per ticket to under thirty seconds.
- Email Security
- Security Automation