Azure Cloud Security Monitoring & Detection Platform
Configured Azure Log Analytics and Azure Activity Logs ingestion for Microsoft Sentinel; verified AzureActivity event telemetry through KQL investigations. Built a read-only Python/Flask security dashboard, log collector, and detection logic for failed operations, RBAC changes, and sensitive resource updates; authored four KQL queries. Automated pytest, Bandit, and pip-audit checks via GitHub Actions; initial CI validation passed 7 tests with no Bandit findings or known dependency vulnerabilities. Live Sentinel rule deployment remains under validation.
Azure Log AnalyticsAzure Activity LogsMicrosoft SentinelKQLPythonFlaskpytestBanditpip-auditGitHub Actions