<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Your Name</title><description>Detection engineering, Microsoft Defender XDR, and Microsoft Sentinel — field notes from the night shift.</description><link>https://www.cloudsecurityblog.eu/</link><item><title>Legacy vs Unified RBAC when onboarding Defender XDR</title><link>https://www.cloudsecurityblog.eu/blog/defender-xdr-rbac/</link><guid isPermaLink="true">https://www.cloudsecurityblog.eu/blog/defender-xdr-rbac/</guid><description>The one early decision that shapes every permission you assign afterwards.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Field notes: building a Sentinel CCF connector</title><link>https://www.cloudsecurityblog.eu/blog/sentinel-ccf-notes/</link><guid isPermaLink="true">https://www.cloudsecurityblog.eu/blog/sentinel-ccf-notes/</guid><description>What actually matters when you move a connector to the Codeless Connector Framework.</description><pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Why I started writing these notes</title><link>https://www.cloudsecurityblog.eu/blog/welcome/</link><guid isPermaLink="true">https://www.cloudsecurityblog.eu/blog/welcome/</guid><description>A short intro to what this blog is for and who it is for.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item></channel></rss>