Projects & labs

Proof-of-concepts, KQL queries, scripts and lab write-ups. Each one states the problem, the approach, what it touches from a security point of view, and where the code lives.

No projects are published yet. When the first lab or script is ready, it will appear here with its write-up and a link to the code.

In the meantime, the articles are where the hands-on detail is.

Ideas, not started

Possible projects, listed so the structure is visible. None of these exist yet.

  • Defender for Endpoint onboarding checks

    Placeholder. A possible companion to the onboarding article: queries to confirm which devices are onboarded and reporting.

  • Conditional Access policy review script

    Placeholder. A possible PowerShell and Microsoft Graph script for exporting and reviewing Conditional Access policies.