practitioner field notes · defensive security

Real defensive work,
written honestly.

Ram Mudigina ✓ Verified
Security Lead · Surya Technologies · Bengaluru

27

Field notes

09

Verticals

100%

From real work

Windows PowerShell — BlueTeam

PS BlueTeam:\> Get-Vertical | Format-Table -Auto// pick a drawer

CodeVerticalFocusNotes

──────────────────────────────────────────────────────────────────────────

IDNIdentity SecurityTokens, Conditional Access, PIM, passwordless9 EDREndpoint SecurityEDR, hardening, Intune, LAPS4 DFIRDigital ForensicsLegal holds, eDiscovery, preservation3 MAILEmail SecurityMail flow, phishing, delegation3 IRIncident ResponseContainment and honest writeups2 DETDetection EngineeringKQL hunting, Sentinel rules2 CLDCloud SecuritySecure access, posture2 SOCSOC OperationsTriage, workflow, automation1 PSPowerShell LibraryReusable blue-team scripts1

PS BlueTeam:\> Get-FieldNote -Newest 4// latest, newest first

FN-027 · PSA privileged-access reporter: who holds admin, and is it standing or JIT?✓ Aug 2026 FN-026 · IDNTemporary Access Pass is a loaded gun: using it without shooting yourself✓ Aug 2026 FN-025 · IDNKilling standing admin: tiered privileged access with PIM✓ Aug 2026 FN-024 · EDRWindows Hello for Business via Intune: the two paths, and picking the right one✓ Aug 2026