Methodology

Collection

Heroku Scheduler runs the collection command every six hours. The job reads approved sources from MongoDB, fetches public Microsoft-focused material, detects new or materially changed content, and records each run in MongoDB.

Classification

OpenAI is used as an analysis layer, not as the source of truth. Published records require a public source URL, a confidence score, Microsoft security relevance, and operational value for Sentinel, Defender, vulnerability management, KQL hunting, or public advisory tracking.

Publication

Demo content is excluded from production views. Tenant-private Microsoft 365 health is not collected, and public advisory pages should not be read as a tenant health dashboard.