Microsoft Security · Detection Engineering
Marvin Rose
Cyber Security Architect. I write about Microsoft Sentinel, Defender XDR and Entra ID — how they work under the hood, and the KQL I actually use.
SecurityPeople
| where Name == "Marvin Rose"
| extend Role = "Cyber Security Architect"
| mv-expand Focus = dynamic([
"Sentinel", "Defender XDR",
"Entra ID", "ASIM", "KQL"])
| project Name, Role, Focus