Viewed
A skill, applied
Security entity mapping
I define how affected users, devices and observables should retain their meaning as security incidents move between Sentinel and the ServiceNow incident workflow.
Experience at UK Water Utility
All cards in this section are viewed.
UK Water Utility
Generate Sentinel test incidents from Teams
Security Automation & Integration TestingBuilt a Copilot Studio and Power Automate workflow that gives ServiceNow developers repeatable Sentinel incidents on demand, with curated entities, overlap protection and automatic rule reset.
Read the storyUK Water Utility
Make Sentinel and ServiceNow agree on incident closure
SIEM/SOAR Integration & Acceptance TestingDesigned and passed nine bidirectional closure tests, while defining how entities, ATT&CK context and escalation should move across Sentinel, ServiceNow SIR and XSOAR.
Read the story