Now

Updated May 12, 2026

Shipped mcp-sentinel-detection-engine v0.1.0 on May 12, 2026 — an MCP server that drives the Sigma → KQL → Microsoft Sentinel Terraform pipeline from Claude. Companion to mcp-defender-xdr: hunt there, ship detections from here. Now working v0.2: live workspace schema, HTTP/SSE transport, per-tenant rate-limit handling.

• Studying for SC-200.
• Writing a post on detection engineering with Claude.

This is a /now page — what I'm focused on at this point in my life. Updated roughly monthly.