// writeups

Security writeups

Notes on security engineering, cloud defense, incident response, and lessons learned. I also publish on Medium ↗.

Jul 10, 2026

Automating Tier 1 Incident Response with MCP and RAG

How I connected Microsoft Sentinel, Entra ID, and internal runbooks to an AI agent — and cut MTTR by 25%.

#mcp#sentinel#azure#automation →