[mc4wp_form]
Azure Sentinel can now Analyze All Available Azure Active Directory Log Files
Over the past several weeks there’s a been a mighty movement in the Data Connector blade of Azure Sentinel, resulting...
Read moreHighlights
Recent News
New Microsoft Security Operations Analyst Associate Certification with Azure Sentinel and Defender
If you’ve taken the exam for the Microsoft Azure Security Engineer certification, you may have gotten a bit excited in...
New Azure Sentinel Learning Modules Released
I noted just a month or so ago that a Learning Path for Azure Sentinel was made available just in time for...
How to Connect the New Intune Devices Log Azure Sentinel
I’ve updated my original instructions on Connecting Intune to Azure Sentinel due to a recent log addition for Intune. Use those instructions...
AMA for Azure Sentinel on the Microsoft Security Insights Podcast and Twitch Stream
I noted yesterday that I have a webinar coming up that you can sign-up to participate in. See: Upcoming Webinar: A...
The Latest
Opinion
Security and Compliance
Replay Now Available – Microsoft Security Insights 036: Azure Sentinel with Rod Trent
The replay is now available for both the Podcast and the...
Upcoming Webinar: A Day in the Life of an Azure Sentinel Analyst
Azure Sentinel has change – a LOT – since that original delivery of “A Day in the Life of...
Official Azure Sentinel PowerShell Module Released
when the rest of the world wasn’t watching, the Microsoft team unleashed the first rev of a...
Suggested Daily, Weekly, and Monthly Tasks for Azure Sentinel
As more and more customers use Azure Sentinel to view and respond to security alerts and threats...
Azure Sentinel Daily Task: Hunting Queries and Bookmarks
This is part of a continuing series in relation to the Suggested Daily, Weekly, and Monthly Tasks for...
SOAR
MAY THE “TI” BE WITH YOU: Connect ThreatConnect TIP with Azure Sentinel
Generally there are multiple forms of Cyber Threat Intelligence (CTI) categories, "Tactical TI" mainly for observables & indicators - "Strategic TI"...
Artificial Intelligence
New Search Capability for Azure Sentinel Incidents
New improved search capability for the Azure Sentinel Incidents blade is rolling out. Better search Originally, you could only search...
Threat Intelligence
Tips for Parsing Syslog to Azure Sentinel
n this blog post, I don’t want to spend a lot of time digging through the specifics of how to...
Security Operations
Exporting Events from Disconnected Systems to Ingest into Azure Sentinel
I had the occasion recently to work with a customer that had domain controllers that were disconnected from the Internet,...
