Book

Field Notes on Microsoft 365 Security

Conditional Access, Entra ID and the outages nobody writes up.

Planned

A collection of the incidents worth writing down: what broke, what the logs actually said, and what the fix cost. No vendor framing.

What you will learn

  • How to read an Entra ID sign-in log when the obvious answer is wrong.
  • Conditional Access rollouts that do not cause a 2am outage.