Insights
Notes from the field.
Practical writing on Microsoft 365, security, and investigations, for the people who have to make the decisions.
Microsoft cloud
Why Microsoft 365 Audit Logs Matter During an Investigation
When something goes wrong in Microsoft 365, the audit log is often the only impartial record of what happened. Understanding its reach, and its limits, is essential.
· 4 min readCybersecurity
What Businesses Should Review Before an Employee Departure
Most employee departures are routine. For the ones that aren't, a short, consistent technical checklist protects the business without treating anyone as a suspect.
· 3 min readDigital investigations
What to Preserve After a Microsoft 365 Security Incident
When a Microsoft 365 account is compromised, the first hours shape what you can later reconstruct. A practical guide to preserving evidence without making things worse.
· 4 min readHave a question an article didn't answer?
Ask it directly. You will get a plain answer.