topic
CCF
2 posts tagged “CCF”.
What your DCR transform actually does to untrusted data (and why it matters now)
A CCF-authoring deep-dive: ingestion-time transform design quietly decides what your detections — and now your AI readers — actually see. What a transform really does to attacker-controlled text, the restricted-KQL gotchas that bite, and a non-destructive trust-tagging pattern you can adopt today.
Ingesting Google Cloud Logs into Microsoft Sentinel: Native vs. Custom Architectures
Bringing GCP audit, VPC flow, and DNS logs into Microsoft Sentinel — the native Pub/Sub connector versus a custom ingestion pipeline, with setup steps, trade-offs, and troubleshooting.