⚠ Reorganisation in progress — each project is being migrated to its own dedicated repository. Links and structure will update as work completes.

Live Projects · v1

Live
Projects

Portfolio projects and lab implementations organised by Microsoft product area. Each card links to the source repository.

Active  1
Complete  5
On Hold  1
Total  7

Cross-pillar / Architecture

1 project

Fabric Purview Governance Simulation

Product area Microsoft Fabric · Purview DLP / Data Map / Power BI Governance
Outcome 10-lab simulation building a governed Fabric data estate with sensitive data; covers DLP policy design, real-time scanning, Data Map asset discovery, Unified Catalog, and Power BI report governance chain

Next steps

1) Migrate to dedicated repo · 2) Audit and review for modernization and maturity

Compass nodes

Microsoft Purview Microsoft Fabric Purview ∩ Entra Purview as Code DLP policy alerts
Status Complete
marcusjacobson/Projects · Fabric-Purview-Governance-Simulation

Microsoft Purview

2 projects

Purview as Code

Product area Purview as Code · IaC / DevSecOps · Bicep / PowerShell
Outcome Tenant-neutral template that version-controls a full Microsoft Purview environment as code across two planes — Bicep for the Purview account (control plane) and declarative YAML rendered by idempotent PowerShell reconcilers for the data plane (sensitivity labels, DLP, data lifecycle, records, insider risk, communication compliance, DSPM, Data Map). Deployed by GitHub Actions over OIDC with no long-lived secrets

Next steps

1) Expand data-plane solution coverage per the v2 roadmap · 2) Light up the planned code- and feature-currency watch loops alongside the existing drift loop

Compass nodes

Microsoft Purview Purview as Code Pipeline Security
Status Active
Purview as Code · Overview

Purview Data Discovery Methods

Product area Purview · Built-in SITs / On-Demand Classification / eDiscovery / Graph API discovery
Outcome Configuration-driven simulation that provisions SharePoint sites and generates realistic PII documents at scale (up to 20k), then detects sensitive data three ways — immediate PnP regex, eDiscovery compliance search, and Graph API discovery — benchmarked against an On-Demand Classification and Content Explorer baseline. Built-in SITs only; multi-tenant portable

Next steps

1) Build out Lab 06 cross-method reporting & remediation · 2) Extend discovery to on-prem scanner and Defender for Cloud Apps tracks

Compass nodes

Microsoft Purview eDiscovery
Status Complete
Purview Data Discovery Methods · Lab Navigator

Microsoft Defender XDR

coming soon
More projects in progress — check back soon.

Microsoft Entra

3 projects

Entra-Deployment-Pipelines

Product area Entra as Code · Azure DevOps Pipelines / Terraform Entra provider
Outcome Pipeline-driven deployment of Entra resources via Azure DevOps and Graph API; covers Conditional Access, PIM, groups, users, named locations, authentication methods, and company branding

Next steps

1) Extend to GitHub Actions deployment target · 2) Restructure as standalone multi-platform Entra-as-Code repo

Compass nodes

Microsoft Entra Entra as Code PIM activations Pipeline Security
Status Complete
marcusjacobson/Entra-Deployments-Marcusj-Lab

Entra Zero Trust RBAC

Product area Entra · Zero Trust / RBAC / IGA · Microsoft Graph PowerShell SDK
Outcome End-to-end Zero Trust identity simulation across 9 labs; covers PIM, Conditional Access, entitlement management, delegated administration, app integration, lifecycle governance, and KQL-based reporting — automated via Microsoft Graph PowerShell SDK

Next steps

1) Migrate to dedicated repo · 2) Extend with Intune device compliance integration and cross-tenant scenarios

Compass nodes

Microsoft Entra Zero Trust — all three pillars Sign-in signals PIM activations Access decisions
Status Complete
marcusjacobson/Projects · Entra-Zero-Trust-RBAC-Simulation

Microsoft SC-300 Masterclass

Product area Entra · SC-300 Certification Prep / Identity & Access Administration
Outcome End-to-end SC-300 lab series progressing from greenfield tenant through identity foundation, secure authentication, workload identities, governance, and monitoring — aligned to real-world Identity Administrator deployment order

Next steps

1) Migrate to dedicated repo · 2) Scan and ground in SC-300 Microsoft Learn materials and look for options to mature

Compass nodes

Microsoft Entra Zero Trust — all three pillars Sign-in signals PIM activations Access decisions
Status Complete
marcusjacobson/Projects · SC-300-Identity-Access-Masterclass

Microsoft Sentinel

1 project

Sentinel-as-Code

Product area Microsoft Sentinel · Azure DevOps Pipelines / Bicep / KQL
Outcome Pipeline-driven deployment of Sentinel infrastructure and security content via Azure DevOps; covers Log Analytics workspace provisioning, NRT and scheduled analytics rules, and watchlist automation

Next steps

1) Migrate to dedicated repo · 2) Expand into full Sentinel-as-Code framework covering hunting queries, automation rules, and playbook deployment

Compass nodes

Microsoft Sentinel Sentinel as Code Pipeline Security
Status On Hold
marcusjacobson/Projects · Sentinel-as-Code

Security Copilot

coming soon
More projects in progress — check back soon.
Microsoft Security · Projects Inventory · Last updated: unreleased
← Home Roles → Certifications → Skills → ← Security Compass