Simulate and Validate CEF Logs to Microsoft Sentinel
Updated – 28/11/2022 – The CEF via AMA connector is currently in public preview. You can now stream CEF logs with the new Azure Monitor
7 Min. Read
Manage Security Content as Code with Microsoft Sentinel
Updated — 15/01/2025 — Microsoft announced Bicep Support in Microsoft Sentinel Repositories. Bicep support for Microsoft Sentinel offers streamlined configuration management with intuitive syntax, improved
8 Min. Read
Passing the Microsoft Sentinel Ninja Training
During Microsoft Ignite in November 2021, Azure Sentinel is now called Microsoft Sentinel. They’ve also renamed Azure Security Center and Azure Defender to Microsoft Defender
3 Min. Read
(Solution) Microsoft Sentinel – Caller is Missing Required Playbook Triggering Permissions
During Microsoft Ignite in November 2021, Azure Sentinel is now called Microsoft Sentinel. Automation rules streamline your automation use in Azure Sentinel and enable you
5 Min. Read
Monitor (Entra ID) Azure AD Guest Users with Azure Sentinel
During Microsoft Ignite in November 2021, Azure Sentinel is now called Microsoft Sentinel. Azure Sentinel is a cloud-native Security Information Event Management (SIEM) and Security
8 Min. Read
How to Use Watchlist in Microsoft Sentinel
Updated – 06/08/2021 – Watchlist templates are now in public preview. More information about using the watchlist templates can be found in this section. During
11 Min. Read
Detect a Brute Force Attack with Microsoft Sentinel
The most frequent attack that we often see is an attack on RDP/SSH management port (the brute force attack), and Microsoft provides you with the
8 Min. Read
Monitor Azure Storage Account Activity Log With Microsoft Sentinel
Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution. Azure Sentinel delivers intelligent security analytics
8 Min. Read
Training Video – Implement and Manage Microsoft Sentinel Effectively
Microsoft Sentinel is a Microsoft product with an excellent reputation that precedes it, from when the product was still named Azure Sentinel. Like Microsoft Azure,
3 Min. Read
Top Best Practices for Deploying Microsoft Sentinel
Updated — 02/10/2025 — Starting from October 1, 2025, until March 31, 2026, Microsoft will introduce a new 50 GB commitment tier in public preview,
11 Min. Read