FUTURE PRACTICE · SECURITY ROADMAP
Identity & Detection Engineering
PlannedA proposed learning track for identity security, KQL and Microsoft Sentinel detection validation. No completed lab is claimed.
This is a future learning track. No completed lab is claimed.
Planned case scope
Evidence snapshot
Summarized observations from the documented lab. No private logs or tenant identifiers are included.
| Check | Recorded result | Evidence status |
|---|---|---|
| Microsoft Sentinel detection exercise | Not started; no detection or query test evidence | Planned |
Proposed scope
Proposed: design controlled identity scenarios and document threat hypotheses and defensive observables.
Validation to be completed
Not started or independently validated as a portfolio case.
Result and limitations
Future work will include KQL experiments, validated detection logic and lessons learned when evidence exists.
Next criteria
Results will be published only after practical testing and review.