INSIGHTS

Latest Insights and News

News, Write-ups, and Musings from Blue Cycle

Your EA Reseller Won't Tell You This
Enterprise
March 16, 2026

Your EA Reseller Won't Tell You This

Your EA reseller won't tell you about the 18-24% license waste locked into your renewal. Here's how Blue Cycle helps you rationalize before you migrate to CSP.

Shadow AI is Already Inside Your Organization
Microsoft Security
March 16, 2026

Shadow AI is Already Inside Your Organization

Shadow AI is already inside your organization. Here's how Blue Cycle finds ungoverned AI usage before you deploy Microsoft Copilot.

Your Management Console Is a Weapon. Here's How to Unload It.
Microsoft Security
March 13, 2026

Your Management Console Is a Weapon. Here's How to Unload It.

The Stryker cyberattack used Microsoft Intune's remote wipe feature as a weapon. Here's how to prevent an Intune bulk wipe attack with PIM, Multi Admin Approval, Conditional Access, and Microsoft Sentinel KQL detection rules.

Cribl Cloud REST Collector Best Practices Part 1 — And the AWS Load Balancer Gremlins Nobody Warns You About
Cribl
March 12, 2026

Cribl Cloud REST Collector Best Practices Part 1 — And the AWS Load Balancer Gremlins Nobody Warns You About

A practical guide to Cribl Cloud REST Collector best practices—authentication, pagination, event breakers, state tracking, and avoiding silent API data loss.

Detecting Claude AI Usage on macOS with Microsoft Security - Entra, Purview and Defender XDR
Microsoft Security
March 9, 2026

Detecting Claude AI Usage on macOS with Microsoft Security - Entra, Purview and Defender XDR

A layered detection strategy for Claude AI on macOS using Defender for Endpoint, Purview DLP, Intune, and Entra ID with production-ready KQL queries and shell scripts.

Your Sensitivity Labels Aren't Ready for Copilot
Microsoft Security
February 21, 2026

Your Sensitivity Labels Aren't Ready for Copilot

Most organizations turned on sensitivity labels and stopped. That was fine until Copilot showed up. Here's what's broken and how to fix it.

Blue Cycle Joins Copilot Jumpstart Program
Company News
September 30, 2025

Blue Cycle Joins Copilot Jumpstart Program

Blue Cycle joins the Microsoft 365 Copilot Jumpstart Partner Program, delivering Copilot readiness assessments and deployment planning for enterprises.

Blue Cycle Earns First Microsoft Specializations
Company News
July 7, 2025

Blue Cycle Earns First Microsoft Specializations

These specializations demonstrate our ongoing committment drive success in implementing and operating Microsoft Defender, Microsoft Sentinel...

2024 AWS Marketplace and Partner Update
Cribl
June 24, 2024

2024 AWS Marketplace and Partner Update

Blue Cycle now offers Cribl Professional Services through AWS Marketplace. Leverage AWS spend for Cribl implementations. AWS Select Tier Partner.

Enrich events in real time with GreyNoise Indicators
Cribl
September 17, 2021

Enrich events in real time with GreyNoise Indicators

Cribl Stream pack for real-time GreyNoise threat intel enrichment using Redis for high-volume events. Open source by Blue Cycle.

Blue Cycle LLC Logo

Blue Cycle is a crew of defenders, developers, who feed on leveling up organizations security posture, detection and response cababilities. We do this by apply experience, best practices, and forward thinking approaches to Security Operations, Integration and Data Security challenges facing companies and security service providers as they work towards becoming Frontier Firms.

info@bluecycle.net

Quick Links
Solutions
Partners
BlogContact UsAbout

Copyright 2020-2026. All rights reserved. Privacy Policy