Now

Updated November 2, 2026

Both MCP servers are shipped and public: mcp-defender-xdr for hunting across Microsoft Defender XDR tenants, and mcp-sentinel-detection-engine for the Sigma → KQL → Microsoft Sentinel Terraform pipeline. Hunt there, ship detections from here. The work now is hardening both toward v0.2: live workspace schema fetching, HTTP/SSE transport alongside stdio, and per-tenant rate-limit handling.

• SC-200 earned in September 2026; CCAR-F earned Sept 15, 2026.
• Won the 2026 Huntress CTF: AI Arena (1st of 1,602 teams) and published the writeup.
• Writing a post on detection engineering with Claude.

This is a /now page — what I'm focused on at this point in my life. Updated roughly monthly.