Microsoft Sentinel Threat Intelligence – Part III – Using your TI data with Analytics Rules
In my last post, I showed you how to view and manage your threat indicators on the Sentinel portal. Today,...
Microsoft Sentinel Threat Intelligence – Part II – View and manage your threat indicators
In the first part of this series, I showed what threat intelligence is, how Microsoft Sentinel integrates with external feeds,...
Microsoft Sentinel Threat Intelligence – Part I – Overview
Microsoft Sentinel is a cloud-based Security Information and Event Management (SIEM) solution and a Security orchestration, automation, and response (SOAR) platform. In this...
#Lab: How to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel
The purpose of this blog is to show you how to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel....
Connect AWS to Microsoft Defender for Cloud
Connect AWS to Microsoft Defender for Cloud In this post, I will show how to connect your AWS cloud to...
Microsoft Sentinel free for the first 31 days
Did you know that you can test Microsoft Sentinel for 31 days, being able to ingest up to 10 GB/day?...
Microsoft Sentinel – Ingestion x Retention Costs – Part I
A common question I have been getting and also a tricky topic is related to Microsoft Sentinel costs when it...
KQL Fundamentals – Extend
Level: Beginner | Reading time: 5 minutes Let’s continue our series on KQL with a focus on Cyber Security. Let’s talk today...
Sentinel data retention – extend to 90 days
Level: Beginner | Reading time: 5 minutes Microsoft Sentinel offers some data retention configurations that can help you to retain important logs...
KQL Fundamentals – Summarize
Level: Beginner | Reading time: 5 minutes Let’s continue our series on KQL with a focus on Cyber Security. Let’s talk today...