chore: Full consistency scan — AOC->PULSAR, fix training-data claims, fix 90% claim
AOC -> PULSAR across 10 files (engagement-model, retained-capability, modular-engagements, blue-purple-team-foundation, about-cqre, about-cqre-cs, consultant-field-guide, ai-assisted-tvm, m365-e3-hardening, sovereign-tool-stack, risk-register-example). Training-data framing corrected in: - executive-summary.md: opening paragraph and risk table - README.md: 90% solution claim -> 30-60% in 180 days - modular-engagements.md: public API data use claim - cis-controls-mapping.md: data protection framing - antifragile-risk-register.md: risk entry softened to accurate framing - azure-openai-sovereignty-bridge.md: consumer vs enterprise API distinction Co-Authored-By: Tom Kracmar <tom+claude@cat6.cz>
This commit is contained in:
@@ -122,7 +122,7 @@ Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true
|
||||
|
||||
- Retention: 90 days (E3 default); document the gap vs. 1-year requirement in some regulations
|
||||
- Export for analysis: `Search-UnifiedAuditLog` or use Microsoft Purview Audit (Standard) if available
|
||||
- **AOC integration**: For clients with AOC deployed, unified audit logs are ingested automatically and correlated with Entra ID sign-in events to surface anomalous admin behaviour without manual PowerShell queries
|
||||
- **PULSAR integration**: For clients with PULSAR deployed, unified audit logs are ingested automatically and correlated with Entra ID sign-in events to surface anomalous admin behaviour without manual PowerShell queries
|
||||
|
||||
**Enable Mailbox Auditing**
|
||||
|
||||
@@ -344,6 +344,6 @@ See [Vertical: Banking](../reference/vertical-banking.md) for full regulatory al
|
||||
|
||||
*Previous: [Zero-Budget Hardening](zero-budget-hardening.md)*
|
||||
*Next: [AD and Endpoint Hardening](ad-endpoint-hardening.md)*
|
||||
*For the complete open-source tool arsenal including ASTRAL and AOC, see [Sovereign Tool Stack](sovereign-tool-stack.md)*
|
||||
*For the complete open-source tool arsenal including ASTRAL and PULSAR, see [Sovereign Tool Stack](sovereign-tool-stack.md)*
|
||||
|
||||
For how Intune deployment becomes the natural entry point for broader security transformation, see [Endpoint Management Entry Vector](endpoint-management-entry-vector.md).
|
||||
|
||||
Reference in New Issue
Block a user