
From Application Packaging to Secure Deployment: Where Security Actually Breaks
Follow one app from source to removal and see where security breaks: secrets in packages, fakeable detection, SYSTEM installs, writable folders and zombie apps.
Transforming IT with AI-driven automation, cloud engineering, and intelligent workflows.
145+
Articles
3
Topics
Free
Always
Endpoint & CloudFeatured12m readOct 6, 2026
Endpoint & CloudFeatured11m readOct 6, 2026
Endpoint & CloudFeatured16m readOct 6, 2026
Fresh from the lab

Follow one app from source to removal and see where security breaks: secrets in packages, fakeable detection, SYSTEM installs, writable folders and zombie apps.

Every ASR rule on at once: what lights up in audit, what breaks Office, PowerShell, developer machines and line-of-business apps, and how to reach Block safely.


What happens after the certificate lands: device vs user certificates, 802.1X, RADIUS and NPS, VPN authentication, EKUs, trust chains and troubleshooting.

Cloud PKI removes the on-premises CA, NDES and the connector. AD CS can issue to anything. A practical comparison, and a guide to choosing, combining or moving.

How a certificate gets from your Root CA onto an Intune-managed device: AD CS, templates, SCEP vs PKCS, NDES, the Certificate Connector, renewal and revocation.
What makes this different
Not a content farm. Not copied from docs. Every word comes from real-world experience.
Every post ships working PowerShell, code, or a config — tested in production, not copied from docs.
Not just what to do — but why. Tradeoffs, gotchas, and the reasoning behind each design choice.
No vendor fluff, no affiliate links. Just real solutions from real deployments in real organisations.
Explore
Every article is written from hands-on experience — choose the area most relevant to you.
About the author
Cloud Engineer · AI Automation Architect · Modern Workplace Consultant
Cloud Engineer, AI Automation Architect, and Modern Workplace Consultant based in Amsterdam, Netherlands. Specializing in scalable, secure enterprise solutions with Microsoft Azure, Intune, PowerShell, and AI-driven automation using ChatGPT, Gemini, and modern LLM technologies.
Tools I've built
A CLI tool and dashboard that analyzes Lambda invocation costs, identifies expensive functions, and recommends optimizations based on your actual usage patterns.
A unified Grafana dashboard set and alerting configuration for monitoring multiple Kubernetes clusters, with pre-built runbooks for the 10 most common alert types.
Deep-dive technical articles on Intune, PowerShell, and AI — no noise, no spam.