Tag: artificial-intelligence
-
The PI Earns His Keep: Tuning MDI, Taming False Positives, and Making Your Detection Stack Actually Livable
(Or: How to Stop the Noise Without Going Blind) Let’s set the scene. You’ve deployed MDI. The sensors are on every domain controller. It’s talking to Defender XDR. Sentinel is listening. Your Conditional Access policies are wired to respond to risk signals. Your playbooks are humming. You did the work, and you did it right.…
-
The PI Calls It In: Automated Response, Playbooks, and What Happens When Nobody’s Watching the Board
(Or: How to Make Sure Kevin Has a Very Bad Night Even When You’re Asleep) Kevin had a rough Post 2. He got flagged at reconnaissance. He got flagged at Kerberoasting. He got flagged at lateral movement. He got flagged at DCSync. The PI was on him the whole time, building the case file, correlating…
-
Security Copilot on the Case: What Happens When the New Hire Gets a Badge
Or: The Part Where Our Enthusiastic New Hire Actually Earns Their Keep Last time, we introduced Microsoft Copilot as the eager new hire who’s read every manual, means well, and just needs a little supervision before anything goes out the door. We talked about M365 Copilot making your inbox slightly less terrifying, and gave Security…
-
The Enthusiastic New Hire: A Field Guide to Microsoft Copilot
Or: How I Learned to Stop Worrying and Love the AI That cc:’s Everyone We’ve built quite a cast of characters in this world. The bouncer checking IDs at the door. The no-nonsense lady running the tool room. The guy in the chair watching the monitors. Everyone has a role. Everyone knows their lane. And…