http://mattswann.dev/tags/defender/2026-07-07T09:00:00-06:00http://mattswann.dev/series/detection-deep-dive/2026-07-07T09:00:00-06:00http://mattswann.dev/posts/detection-deep-dive-encoded-powershell/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/detection-deep-dive/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/kql/2026-07-07T09:00:00-06:00http://mattswann.dev/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/mitre-attack/2026-07-07T09:00:00-06:00http://mattswann.dev/posts/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/powershell/2026-07-07T09:00:00-06:00http://mattswann.dev/series/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/2026-07-07T09:00:00-06:00http://mattswann.dev/tags/detection-engineering/2026-06-11T21:29:58-06:00http://mattswann.dev/posts/eviltokens-kql-phishing/2026-06-11T21:29:58-06:00http://mattswann.dev/tags/phishing/2026-06-11T21:29:58-06:00http://mattswann.dev/tags/sentinel/2026-06-11T21:29:58-06:00http://mattswann.dev/about/