sc-200

DLP alert investigation using Microsoft Purview

PowerShell CIS Benchmark audit for Azure — checks IAM, NSGs, storage, Defender and logging with HTML report output

📚 Persoonlijk IT-kennisportfolio: SOP's, handleidingen en studienotities rond Support, Cloud (Azure), Cybersecurity en Netwerk — opgebouwd vanuit de praktijk.

Personal Sentinel detection lab: KQL, synthetic identity/activity logs, ATT&CK mapping, local validation, and incident investigation.

Microsoft Sentinel SOC built as detection-as-code (SC-200) — 12 analytics rules + 15 hunts deployed via Bicep, watchlists, SOAR playbooks, a SOC workbook, and CI validation, with a live-fired incident behind it. Project 05 of the Microsoft Cybersecurity Architect portfolio.

SOC detection engineering lab: Sentinel, Conditional Access, and SOAR containment across an identity-to-endpoint kill chain

Professional cybersecurity portfolio showcasing Microsoft Sentinel, Threat Hunting, Detection Engineering, DFIR, Python automation, and SOC Analyst projects.

"A practical SOC Analyst lab documenting the implementation of Microsoft Sentinel SIEM and its integration with Microsoft Defender XDR as part of the SC-200 certification path."