Articles and notes on secure identity design, Entra ID, Conditional Access, and enterprise cloud governance.
Why safe harbor has to come before any change in a hybrid identity lab — and how it becomes a Zero Trust practice for the operator, the privilege chain, and the evidence trail.
An HR-file-driven identity pipeline through midPoint into a tiered Active Directory, synced to Entra ID with password writeback — what I built and why.
Two Microsoft Applied Skills earned in June 2026 — Active Directory Domain Services and Microsoft 365 Copilot security — and what each one covers.
From Wiz Challenge 12: how a CI/CD pipeline itself becomes the attack surface, and what that means for trust boundaries in deployment.
Four steps from a vulnerable file parameter to full secret access inside a Kubernetes cluster — a hackArcana walkthrough with defensive notes at each stage.
Where Zero Trust meets friction in environments where AD still runs and Entra ID sits on top — and what actually moves the needle.