Blogging about Microsoft 365, Azure and Automation!
One of the main benefits of Microsoft Sentinel as a SIEM is the tight integration with other Microsoft products such as Azure Active Directory and Microsoft 365 Defender. The integration … Continue Reading Incorrect creation time for incident creation in Microsoft Sentinel
If you have been following me on Twitter or my blog, it’s no secret that I absolutely love Azure Sentinel. It’s on the fastest moving product within the Microsoft Security … Continue Reading Why you should be using Azure Sentinel as an MSSP
Today it’s time for a rather short blog post on an issue I ran into for which I couldn’t find anything online. The issue I have been working with the … Continue Reading The issue of Log Analytics column names and spaces
I just blogged on the website of The Collective about using a Lighthouse Service Principal from within Azure DevOps. We use this process internally to manage the Azure Sentinel environment … Continue Reading Using a Lighthouse Service Principal within Azure DevOps
Link to the ARM template for the full playbook can be found on Github. Microsoft cloud SIEM, Azure Sentinel, is an amazing product which can provide central logging and reporting … Continue Reading Saving corporate IPs to Log Analytics with Logic Apps
365 by Thijs