The Curious Engineer

All blogs / Security

Microsoft Sentinel Blog

techcommunity.microsoft.com/category/microsoft-sentinel/blog/microsoftsentinelblog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

SecurityMicrosoft blogsMicrosoft Tech Community

’19’20’21’22’23’24’25’26
Posts
667 from 11 Apr 2019 to 30 Oct 2026
Posting
weekly (84 in the last year)
Kind
company blog

2026 72

  1. What’s new in Microsoft Sentinel: October 2026
  2. Growing our connector ecosystem with 500+ Microsoft Sentinel connectors
  3. Manage all your Microsoft Sentinel data in one place with Unified Data Management (Public Preview)
  4. Expanded cross-tenant delegated access in Microsoft Defender is generally available
  5. Introducing the Microsoft Sentinel ASIM EmailEvent schema
  6. What’s new in Microsoft Sentinel: September 2026
  7. Public Preview: Multi-account support for Microsoft Sentinel codeless connectors
  8. What’s new in Microsoft Sentinel: August 2026
  9. Building Microsoft Sentinel Connectors in Minutes with the Sentinel Connector Builder Agent
  10. AI-powered playbook generator, now available to more customers
  11. Smarter signals, broader coverage: UEBA anomalies on top of Behaviors layer and new data sources
  12. Public Preview: Nested API Support Comes to Microsoft Sentinel CCF
  13. Building a CCF Nested API Pull Connector: A Technical Lab Walkthrough
  14. What’s new in Microsoft Sentinel: July 2026
  15. Announcing the ASIM Parser Creation Agentic Experience
  16. Building toward an Agentic SOC: A Portable, Autonomous Malware Investigation Agent
  17. Behind the Build with Gigamon: Enriching Microsoft Sentinel with Network-Derived Telemetry
  18. The AI-first SOC: Copilot, UEBA, threat intelligence, and SOC optimization
  19. What’s new in Microsoft Sentinel: June 2026
  20. Your readiness playbook: adoption helper, costs, APIs, and the checklist
  21. The governance shift: RBAC, URBAC, data lake, and MSSP
  22. A guide to innovating threat hunting with Microsoft Sentinel custom graph
  23. Detection and automation, reimagined
  24. Anatomy of the change
  25. Introducing New Additions to Microsoft Sentinel Normalization and ASIM
  26. Announcing Public Preview: Agent Identities Asset Connector for Microsoft Sentinel
  27. Transform your security operation with a unified experience in Defender
  28. The Worm in the Supply Chain: How Defender for Endpoint and Sentinel for SAP BTP Caught Shai-Hulud
  29. What’s new in Microsoft Sentinel: May 2026
  30. Agent 365 connector: Monitor, hunt, and investigate AI agent activity in Microsoft Sentinel
  31. Extending Sentinel Data Integration: Azure Blob Storage Support for CCF Connectors
  32. What’s new in Microsoft Sentinel: April 2026
  33. Use Data Wrangler to Streamline Your Microsoft Sentinel data lake Notebook Development
  34. Introducing the Microsoft Sentinel Training Lab. Hands-On Security Operations in Minutes
  35. Enforce Cost Limits on KQL Queries and Notebooks in the Microsoft Sentinel Data Lake
  36. Running KQL queries on Microsoft Sentinel data lake using API
  37. Microsoft Sentinel data federation: Expand visibility while preserving governance
  38. How to Ingest Microsoft Intune Logs into Microsoft Sentinel
  39. Estimate Microsoft Sentinel Costs with Confidence Using the New Sentinel Cost Estimator
  40. Introducing the New Microsoft Sentinel Logstash Output Plugin (Public Preview!)
  41. Accelerate Agent Development: Hacks for Building with Microsoft Sentinel data lake
  42. Microsoft Sentinel MCP Server with external AI models (Claude) for natural language investigations
  43. How Granular Delegated Admin Privileges (GDAP) allows Sentinel customers to delegate access
  44. Agentic Use Cases for Developers on the Microsoft Sentinel Platform
  45. RSAC 2026: New Microsoft Sentinel Connectors Announcement
  46. Extending App Assure’s Sentinel Promise through the Sentinel Advisory Service
  47. What’s new in Microsoft Sentinel: RSAC 2026
  48. Microsoft Sentinel is now supported in Unified RBAC with row-level access
  49. Turning historical patterns into actionable detection pipelines with Microsoft Sentinel data lake
  50. Microsoft partners with DataBahn to accelerate enterprise deployments for Microsoft Sentinel
  51. What’s New in Microsoft Sentinel: March 2026
  52. Top 5 Microsoft Sentinel Queries for Threat Hunting
  53. Unlocking value with Microsoft Sentinel data lake
  54. Disrupt AWS attacks automatically in Microsoft Sentinel
  55. Introducing the next generation of SOC automation: Sentinel playbook generator
  56. Accelerate Your UEBA Journey: Introducing the Microsoft Sentinel Behaviors Workbook
  57. Three ways to run KQL on Microsoft Sentinel data lake: Interactive, Async, or Jobs
  58. Unlocking the power of Notebooks with Microsoft Sentinel data lake
  59. Public Preview Announcement: Empower Real-Time Security with Microsoft Sentinel’s CCF Push Feature
  60. What’s new in Microsoft Sentinel: February 2026
  61. Data lake tier Ingestion for Microsoft Defender Advanced Hunting Tables is Now Generally Available
  62. Update: Changing the Account Name Entity Mapping in Microsoft Sentinel
  63. The Microsoft Copilot Data Connector for Microsoft Sentinel is Now in Public Preview
  64. The Agentic SOC Era: How Sentinel MCP Enables Autonomous Security Reasoning
  65. UEBA Solution Power Boost: Practical Tools for Anomaly Detection
  66. New content types supported in multi-tenant content distribution
  67. UPDATE: New timeline for transitioning Sentinel experience to Defender portal
  68. Accelerate your move to Microsoft Sentinel with the new AI Powered SIEM migration experience
  69. Automating Microsoft Sentinel: A blog series on enabling Smart Security
  70. Announcing Unified SOX & DORA Compliance Solutions in Microsoft Sentinel
  71. What’s new in Microsoft Sentinel: January 2026
  72. Turn Complexity into Clarity: Introducing the New UEBA Behaviors Layer in Microsoft Sentinel

2025 62

  1. Microsoft Sentinel Platform: Audit Logs and Where to Find Them
  2. Managing Microsoft Sentinel and Microsoft Defender XDR permissions in Microsoft Defender portal
  3. Call to Action: Migrate Your Classic Alert‑trigger Automations to Automation Rules Before March 2026
  4. Efficiently process high volume logs and optimize costs with Microsoft Sentinel data lake
  5. What’s New in Microsoft Sentinel: December 2025
  6. Build less, secure more: Simplify security data management with Microsoft Sentinel data lake
  7. New Compliance Solutions in Microsoft Sentinel: HIPAA & GDPR Reports
  8. Ignite 2025: New Microsoft Sentinel Connectors Announcement
  9. Detect more, spend less: the future of threat intelligence correlation
  10. Operationalizing the Sentinel data lake: A Practitioner’s Guide
  11. Automating IOC hunts in Microsoft Sentinel data lake
  12. What’s New in Microsoft Sentinel: November 2025
  13. Microsoft Sentinel for SAP Agentless connector GA
  14. Run agentless SAP connector cost-efficiently
  15. New bi-directional export for TI in Microsoft Sentinel and strategic Cyware partnership
  16. 6 truths about migrating Microsoft Sentinel to the Defender portal
  17. Microsoft Sentinel data lake FAQ
  18. App Assure's Sentinel promise now extends to Microsoft Sentinel data lake
  19. Microsoft Sentinel and Defender: ITSM Integrations Explained
  20. Automate Security Workflows in Microsoft Sentinel with BlinkOps
  21. How to: Ingest Splunk alert data to Microsoft Sentinel SIEM
  22. Microsoft Sentinel’s AI-driven UEBA ushers in the next era of behavioral analytics
  23. Table Talk: Sentinel’s New ThreatIntel Tables Explained
  24. Automating Microsoft Sentinel: Playbook Fundamentals
  25. Automating Watchlists in Microsoft Sentinel
  26. Planning your move to Microsoft Defender portal for all Microsoft Sentinel customers
  27. Introducing Summary Rules Templates: Streamlining Data Aggregation in Microsoft Sentinel
  28. Manage cases from across tenants in one place
  29. Microsoft Sentinel: Repositories, the Future of Content-as-Code & Best Practices​
  30. Case Management: Incidents, Cases, and When to Use Them
  31. Exciting Announcements: New Data Connectors Released Using the Codeless Connector Framework
  32. Automating Microsoft Sentinel: Part 2: Automate the mundane away
  33. AI-Powered MITRE ATT&CK Tagging for SOC Optimization
  34. Automating Microsoft Sentinel: A blog series on enabling Smart Security
  35. Risk-based Recommendation for SOC Optimization
  36. The Power of a Unified SIEM+XDR IdentityInfo Schema
  37. Automate Extraction of Microsoft Sentinel Analytical Rules from GitHub Solutions
  38. Announcing File Attachments for Case Management
  39. Enhance mobile security with the Samsung Knox solution for Microsoft Sentinel
  40. Microsoft Sentinel for SAP: New Security Content Goes Beyond Agentless 🚀
  41. Transitioning from the HTTP Data Collector API to the Log Ingestion API…What does it mean for me?
  42. RSAC 2025 new Microsoft Sentinel connectors announcement
  43. App Assure’s promise: Migrate to Sentinel with confidence
  44. Announcing Rich Text for Case Management
  45. Microsoft Sentinel Ninja Training - the April 2025 update
  46. Multi-workspace for Multi-tenant is now in Public Preview in Microsoft's Unified SecOps Platform
  47. Multi Workspace for Single tenant is now in Public Preview in Microsoft’s unified SecOps platform
  48. Automating Azure Resource Diagnostics Log Forwarding Between Tenants with PowerShell
  49. Case Management is now Generally Available
  50. Integrating Radware WAF Logs with Microsoft Sentinel Using Logic Apps
  51. Microsoft Sentinel Project Deployment Tracker
  52. New capabilities coming to Microsoft Sentinel this Spring
  53. Integrating Fluent Bit with Microsoft Sentinel
  54. Introducing Threat Intelligence Ingestion Rules
  55. Introducing the Unified Device Timeline Experience in Microsoft SIEM + XDR
  56. Announcing Public Preview: New STIX Objects in Microsoft Sentinel
  57. What’s new: Find the Sentinel content you need using AI search
  58. Improve SecOps collaboration with case management
  59. Ingesting Palo Alto Cortex XDR Logs into Microsoft Sentinel with the Updated CCP Connector
  60. Whats New: Bicep Support in Microsoft Sentinel Repositories
  61. How to successfully evaluate the SAP for Sentinel solution and implement it in production (Part 2)
  62. Unified coverage management across SIEM and XDR in SOC optimization

2024 55

  1. Introducing SOC Optimization Recommendations Based on Similar Organizations
  2. Go agentless with Microsoft Sentinel Solution for SAP
  3. How to successfully evaluate the SAP for Sentinel solution and implement it in production (Part 1)
  4. What's New: View Microsoft Sentinel Workbooks Directly from Unified SOC Operations Platform
  5. How Microsoft’s leading SIEM is getting even better
  6. Leave no data behind: Using summary rules to store data cost effectively in Microsoft Sentinel
  7. What’s New: Exciting new Microsoft Sentinel Connectors Announcement - Ignite 2024
  8. Deploy Microsoft Sentinel using Bicep
  9. Save money on your Sentinel ingestion costs with Data Collection Rules
  10. What to do if your Sentinel Data Connector shows as [DEPRECATED]
  11. Cowrie honeypot and its Integration with Microsoft Sentinel.
  12. Introducing the Use Cases Mapper workbook
  13. Level Up Your Security Skills with the New Microsoft Sentinel Ninja Training!
  14. What's New: Global Search in Unified Security Operations platform includes Sentinel user and devices
  15. Detecting AiTM Phishing via 3rd-Party Network events in Unified Security Operations Platform
  16. The power of Data Collection Rules: Detect Disabling Windows Defender Real-Time Protection
  17. The power of Data Collection Rules: Monitoring PowerShell usage
  18. SIEM Migration Update: Now Migrate with contextual depth in translations with Microsoft Sentinel!
  19. The power of Data Collection Rules: Collecting events for advanced use cases in Microsoft USOP
  20. What's new: Multi-tenancy in the unified security operations platform experience in Public Preview
  21. Comprehensive coverage and cost-savings with Microsoft Sentinel’s new data tier
  22. Revolutionizing log collection with Azure Monitor Agent
  23. Microsoft Sentinel & Cyberint Threat Intel Integration Guide
  24. Frequently asked questions about the unified security operations platform
  25. Enhancing Security Monitoring: Integrating GitLab Cloud Edition with Microsoft Sentinel
  26. Microsoft Sentinel All-In-One now available for Azure Government
  27. Unified Security Operations Platform - Technical FAQ!
  28. What's new: Run playbooks on incidents on-demand going GA in unified platform
  29. Using Cribl Stream to ingest logs into Microsoft Sentinel
  30. Introducing SOC Optimization API
  31. What's New: Create your own codeless data connector
  32. Debugging Playbooks
  33. Public Preview: Log Analytics Workspace Replication
  34. Configuring archive period for tables at Mass for Data Retention within Log Analytics Workspace
  35. PART 3 - Ingesting AWS GovCloud Microsoft Sentinel in Azure Commercial
  36. SOC optimization: unlock the power of precision-driven security management
  37. Microsoft Sentinel: Delivering value to your SOC
  38. Send data to Microsoft Sentinel using Cribl Stream
  39. Examining the Deception infrastructure in place behind code.microsoft.com
  40. Setting up Sentinel for Kubernetes Monitoring
  41. Ingesting Non-Microsoft Cloud Security Data into Microsoft Sentinel for Gov & DIB customers part 2
  42. Ingesting Non-Microsoft Cloud Security Data into Microsoft Sentinel for Government & DIB Customers
  43. Enhance the ingestion of AWS CloudWatch logs into Microsoft Sentinel with AWS Lambda
  44. [What's New] Easily migrate to Microsoft Sentinel with the new SIEM migration experience
  45. Create Codeless Connectors with the Codeless Connector Builder (Preview)
  46. How to Set Up Sentinel Data Connectors for Kubernetes and GitHub
  47. Monitoring Kubernetes Clusters, Image Build Environment and Container Registries with Sentinel
  48. Upcoming Content Hub AMA supported Data Connectors
  49. Create Tasks Repository in Microsoft Sentinel
  50. What's New: CrowdStrike Falcon Data Replicator V2 Data Connector is now Generally Available!
  51. Unleash the full potential of User and Entity Behavior Analytics with our updated workbook
  52. Querying Watchlists
  53. Leveraging CEF with Azure Monitor Agent (AMA) for GCP-Hosted Fortinet Firewall and Syslog Forwarder,
  54. Use Azure DevOps to manage Sentinel for MSSPs and Multi-tenant Environments
  55. Unified Operation Platform features released at public preview

2023 48

  1. Identifying Adversary-in-the-Middle (AiTM) Phishing Attacks through 3rd-Party Network Detection
  2. Microsoft Sentinel: Public preview of Microsoft Defender for Cloud to Defender XDR integration
  3. Sentinel's Enrichment Widgets: Elevating Cybersecurity Intelligence with Microsoft
  4. Microsoft Sentinel Partner Solution Contributions update - Ignite 2023
  5. Introducing a Unified Security Operations Platform with Microsoft Sentinel and Defender XDR
  6. Architecture Guidance: How to ingest GCP Firewall\VPC logs into Microsoft Sentinel
  7. What’s New: Introducing Microsoft Sentinel Web Session Essentials Solution.
  8. Fortifying Your Defenses: How Microsoft Sentinel Safeguards Your Organization from BEC Attacks
  9. Accelerating Zero Trust Alignment with Microsoft Sentinel
  10. Microsoft Sentinel's new incident experience is generally available!
  11. Introducing Microsoft Sentinel Optimization Workbook
  12. Manage Access to Microsoft Sentinel Workbooks with Lower Scoped RBAC
  13. Help Protect your Exchange Environment With Microsoft Sentinel
  14. Automate tasks management to protect your organization against threats
  15. Taking Entity Investigation to the Next Level: Microsoft Sentinel’s Upgraded Entity Pages
  16. Future Proof your SOC with the Power of the Azure Ecosystem and Defender Threat Intelligence
  17. Introducing the new Microsoft Sentinel simplified pricing.
  18. [What’s New] Microsoft Sentinel Content Hub GA and OOTB Content Centralization
  19. Detect threats on your Power Platform based no-code/low-code applications with Microsoft Sentinel
  20. What’s new: Monitor and optimize the execution of your scheduled analytics rules
  21. What's new: Microsoft Sentinel Solution for Dynamics 365 Finance and Operations
  22. Deep dive into Microsoft Sentinel’s new Overview dashboard
  23. Split Microsoft Sentinel Tables with Multi-Destination Data Collection Rules
  24. Introducing the Microsoft Sentinel Triage Assistant (STAT)
  25. NCS Case Study - End-to-End Integration of Custom BYOML model with Sentinel
  26. Revolutionize your SAP Security with Microsoft Sentinel's SOAR Capabilities
  27. Create, Edit, and Monitor Data Collection Rules with the Data Collection Rule Toolkit
  28. Announcing Public Preview of Microsoft Sentinel in Azure China 21Vianet
  29. What’s New: Introducing Microsoft Sentinel DNS Essentials solutions.
  30. RSAC 2023: Microsoft Sentinel empowering the SOC with next-gen SIEM
  31. Announcing Microsoft Sentinel All-in-One v2
  32. Advanced Workbook Concepts with Workbooks 202
  33. What's new with Microsoft Sentinel at Secure
  34. What’s new: Sentinel Solution for SAP BTP
  35. What’s New: Introducing Microsoft Sentinel Network Session Essentials solution
  36. [Coming soon] Microsoft Sentinel out-of-the-box content centralization!
  37. Tutorial: Get started with Azure WAF investigation Notebook
  38. ACSC Essential 8 – Health Report in Microsoft Sentinel
  39. Anomaly detection and Explanation with Isolation Forest and SHAP using Microsoft Sentinel Notebooks
  40. Designs for Accomplishing Microsoft Sentinel Scalable Ingestion
  41. What’s new: Monitor the health and audit the integrity of your analytics rules.
  42. Detect capture-replay vulnerabilities & exploits with the Sentinel solution for SAP® applications
  43. [What's New] Extract Actionable Intelligence from Text-based Threat Intel using Sentinel Notebook
  44. The new incident experience is here!
  45. Microsoft Sentinel Solution for SAP® Applications - New data exfiltration detection rules
  46. What’s New: Fusion Incident Investigation Notebook
  47. A Look at Different Options for Storing and Searching Sentinel Archived Logs
  48. Switching to Key Vault Secrets usage for Function App based Microsoft Sentinel Data Connectors

2022 111

  1. MSTICPy Hack Month - February 2023
  2. What's New: More NEW Microsoft Sentinel SOAR solutions
  3. Azure Active Directory Identity Protection user account enrichments removed: how to mitigate impact
  4. What’s new: Run playbooks on entities on-demand
  5. Arm Your Microsoft Sentinel Platform with Industry-Leading Cyber Threat Intelligence from CYFIRMA
  6. [What’s New] Introducing Standalone and OOTB content management at-scale actions
  7. What’s New: 250+ Solutions in Microsoft Sentinel Content hub!
  8. What's New: Introducing Microsoft Sentinel solution for ServiceNow bi-directional sync
  9. Architectural Guidance – Azure Monitor private links with Microsoft Sentinel
  10. Dynamic alert details - The force awakens
  11. What’s new: Incident tasks
  12. What’s new: Monitor the health of your automation rules and playbooks
  13. Update to Microsoft Sentinel’s Technical Playbook for MSSPs is now available (v1.5.1)
  14. Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Information and Event
  15. Upcoming changes to the CommonSecurityLog table
  16. What's New in Sentinel Threat Hunting
  17. Microsoft Sentinel: What's New at Microsoft Ignite
  18. UEBA Essentials solution now available in Content Hub!
  19. Public preview announcement: Defender for IOT solution for Microsoft Sentinel
  20. Announcing the enhanced Microsoft Sentinel AWS CloudTrail solution, powered by new MITRE-Based Rules
  21. Anomaly detection on the SAP audit log using the Microsoft Sentinel for SAP solution
  22. IoT Entity Page - Enhance IoT/OT Threat Monitoring in Your SOC with Sentinel and Defender for IoT
  23. Data Collection Rules Creation Impacting Sentinel UEBA ML Model
  24. Introduction to Machine Learning Notebooks in Microsoft Sentinel
  25. Microsoft Sentinel customizable machine learning based anomalies is Generally Available
  26. Create and delete incidents in Microsoft Sentinel
  27. Power of Threat Intelligence sprinkled across Microsoft Sentinel
  28. Troubleshoot Amazon Web Services S3 connector issues
  29. Enabling AD FS Security Auditing 📡 and Shipping Event Logs to Microsoft Sentinel 🛡️
  30. What's New: SOC Process Framework is Now Live in Content Hub!
  31. Hunting for Teams Phishing with Microsoft Sentinel, Defender, Microsoft Graph and MSTICPy
  32. Azure resource entity page - your way to investigate Azure resources
  33. New ingestion-SampleData-as-a-service solution, for a great Demos and simulation
  34. Detect Masqueraded Process Name Anomalies using an ML notebook
  35. Hunting for Low and Slow Password Sprays Using Machine Learning
  36. Bring Threat Intelligence from Kaspersky using TAXII data connector
  37. Protect critical information within SAP systems against cyberattacks
  38. New Threat Intelligence features in Microsoft Sentinel
  39. Intro to KQL Workbook - Summer Update
  40. Discover the power of UEBA anomalies in Microsoft Sentinel
  41. Microsoft Sentinel Solution for Dynamics 365 News – New OOB analytics rules templates available now!
  42. Microsoft Sentinel Automation Tips & Tricks – Part 3: Send email notification options
  43. What's New in Notebooks - MSTICPy v2.0.0
  44. Microsoft Sentinel Automation Tips & Tricks – Part 2: Playbooks
  45. Deploying Microsoft Sentinel Threat Monitoring for SAP agent into an AKS/Kubernetes cluster
  46. What’s new: Centrally manage automated response to alerts with automation rules
  47. Become a Microsoft Sentinel Automation Ninja!
  48. Import Anomali ThreatStream Feed into Microsoft Sentinel
  49. Migration to Microsoft Sentinel made easy
  50. Microsoft Sentinel Automation Tips & Tricks – Part 1: Automation rules
  51. Correlating Microsoft Defender for Cloud alerts in Sentinel
  52. Microsoft Threat Intelligence Matching Analytics: IP Detections
  53. I'm Being Attacked, Now What?
  54. Import Pulsedive Feed into Microsoft Sentinel
  55. Plan, Track, and Configure Your Microsoft Sentinel Deployment/Migration with This New Workbook
  56. Announcing the Microsoft Sentinel Hackathon Spring 2022 winners
  57. Celebrating the Microsoft Sentinel Ecosystem at RSAC 2022
  58. Analytic rules - 'Sentinel entities' new entity type
  59. Using Forcepoint NGFW advanced workbook to gain deep security analytics and insights
  60. Guided Hunting Notebook: Azure Resource Explorer
  61. What’s new: Automate full incident lifecycle with incident update triggers
  62. Export Historical Log Data from Microsoft Sentinel
  63. What’s new: incident expansion – relate alerts to incidents
  64. Import ReversingLab’s Ransomware Feed into Microsoft Sentinel
  65. Announcing the Microsoft Sentinel: NIST SP 800-53 Solution
  66. What's new: Similar incidents in Microsoft Sentinel
  67. Automating bulk onboarding of Azure IaaS and PaaS resources into Microsoft Sentinel
  68. Search, Investigate, & Respond to Indicators of Compromise with the Threat Intelligence Workbook
  69. What’s new: Closer integration between Microsoft Sentinel and Microsoft 365 Defender
  70. Microsoft Sentinel – Continuous Threat Monitoring for GitHub New OOTB Content
  71. Bring Threat Intelligence from SEKOIA.IO using TAXII data connector
  72. Unleash the Power of Modern SecOps with Microsoft Sentinel SOAR
  73. Microsoft Sentinel for SAP News - Dynamic SAP Security Audit Log Monitor feature available now!
  74. What's new: Power-up automation with Logic Apps Standard
  75. Using Microsoft Teams Adaptive Cards to enhance incident response in Microsoft Sentinel
  76. Export Microsoft Sentinel Playbooks or Azure Logic Apps with Ease
  77. Transferring Microsoft Sentinel scheduled alert rules between different workspaces using PowerShell
  78. New watchlist actions available for watchlist automation using Microsoft Sentinel SOAR
  79. Announcing the Microsoft Sentinel: Cybersecurity Maturity Model Certification (CMMC) 2.0 Solution
  80. Use the bulk update feature with Microsoft Sentinel Watchlists
  81. Announcing the search and filter UI enhancements in Watchlists
  82. Next Evolution of the Microsoft Sentinel Zero Trust (TIC 3.0) Solution
  83. Microsoft Sentinel Ninja Training - the March 2022 update
  84. Participate in the Microsoft Sentinel Hackathon Spring 2022!
  85. Update Microsoft Sentinel VIP Users Watchlist from Azure AD group using playbooks
  86. Common scenarios using Watchlists (with query examples)!
  87. How to use Microsoft Sentinel's SOAR capabilities with SAP
  88. What’s new: Unified Microsoft SIEM and XDR GitHub Community
  89. Microsoft Sentinel Support for Ingestion-Time Data Transformations
  90. FAQ: Search, Basic Ingestion, Archive, and Data Restoration
  91. Configure a continuous data pipeline in Microsoft Sentinel for big data analytics!
  92. Creating effective NRT detections in Microsoft Sentinel
  93. Large Watchlist using SAS key is in Public Preview!
  94. Behind the Scenes: The ML Approach for Detecting Advanced Multistage Attacks with Sentinel Fusion
  95. Joint forces - MS Sentinel and the MITRE framework
  96. New! Normalization is now built-in Microsoft Sentinel
  97. Ingest, Archive, Search, and Restore Data in Microsoft Sentinel
  98. What’s Next in Microsoft Sentinel?
  99. Microsoft Sentinel - SAP User Master Data
  100. Run Microsoft Sentinel playbooks from workbooks on-demand
  101. What's new: run playbooks on incidents on demand
  102. Visualize User and App Access Connections in Azure using Jupyter Notebooks in Microsoft Sentinel
  103. Log sources and analytics rules coverage workbook: see how your tables are being used
  104. What's New: Consolidating Apache Log4j-related insights across Multiple Tenants and Workspaces
  105. Microsoft Sentinel – continuous threat monitoring for GitHub
  106. The Codeless Connector Platform
  107. Modernize Log Management with the Maturity Model for Event Log Management (M-21-31) Solution
  108. What's new: Earn your Microsoft Sentinel Black Belt Digital Badge!
  109. Single Sign On Support for authentication in Microsoft Sentinel Notebooks
  110. Defending Critical Infrastructure with the Microsoft Sentinel: IT/OT Threat Monitoring Solution
  111. Get Hands-On KQL Practice with this Microsoft Sentinel Workbook

2021 135

  1. What’s New: Detecting Apache Log4j vulnerabilities with Microsoft Sentinel
  2. Advanced KQL Framework Workbook - Empowering you to become KQL-savvy
  3. Microsoft Sentinel Jupyter Notebooks knowledge check test
  4. Microsoft Sentinel - SAP continuous threat monitoring workbooks
  5. Announcing the Microsoft Sentinel: Zero Trust (TIC3.0) Solution
  6. MSTICPy Hackathon - January 2022
  7. Unlock value from your incidents using advanced incident search
  8. Investigating Suspicious Azure Activity with Microsoft Sentinel
  9. Microsoft Sentinel - SAP continuous threat monitoring with UEBA entity pages
  10. Creating your first Microsoft Sentinel Notebook
  11. Announcing the Microsoft Purview Insider Risk Management Solution
  12. Microsoft Sentinel: Bring Threat Intelligence from Sectrio using TAXII data connector
  13. Using Code Snippets to build your own Sentinel Notebooks
  14. Learning with the Microsoft Sentinel Training Lab
  15. Announcing the Public Preview of the Microsoft Sentinel Playbook Templates Tab
  16. Automate more with 200+ OOTB playbooks
  17. Enable Continuous Deployment Natively with Microsoft Sentinel Repositories!
  18. Hunt with MITRE ATT&CK techniques using refreshed hunting dashboard
  19. Customize your hunting experience with MITRE ATT&CK techniques and more entity types
  20. What’s new: Microsoft Sentinel Deception Solution
  21. How to use Microsoft Sentinel Near Real Time detections
  22. Introducing Microsoft Sentinel Content hub!
  23. Detecting Emerging Threats with Microsoft Sentinel Fusion
  24. Detection tuning – “Making the tuning process simple - one step at a time.”
  25. Hunting for potential network beaconing patterns using Apache Spark via Azure Synapse – Part 1
  26. Security big data analytics with Azure Synapse and Microsoft Sentinel Notebooks!
  27. Microsoft Sentinel introduces enhancements in machine learning and productivity at Ignite 2021
  28. Announcing the Azure Sentinel Hackathon 2021 winners!
  29. Automation: Integrate Azure Data Explorer as Long-Term Log Retention for Microsoft Sentinel
  30. What’s New: Azure Sentinel Threat Intelligence Workbook
  31. MITRE ATT&CK technique coverage with Sysmon for Linux
  32. A Quick Guide on Using Sysmon for Linux in Azure Sentinel
  33. Automating the deployment of Sysmon for Linux 🐧 and Azure Sentinel in a lab environment 🧪
  34. Analyzing Endpoints Forensics - Azure Sentinel Connector
  35. Simple Row-Based Access Workbook: Lab Walk-Through with Azure Sentinel and Azure Data Explorer (ADX)
  36. The Azure Sentinel Anomalies Simulator
  37. Querying WHOIS/Registration Data Access Protocol (RDAP) with Azure Sentinel and Azure Functions
  38. Monitoring Microsoft Sentinel Analytical Rules – Push Health Notifications
  39. General Availability of Azure Sentinel Threat Intelligence in Public and Azure Government cloud
  40. Azure Sentinel To-Go! A Linux 🐧 Lab with AUOMS Set Up to Learn About the OMI Vulnerability 💥
  41. Microsoft Sentinel Notebooks Ninja Part 3: Overview of the Pre-built Notebooks - the Grand List
  42. Hunting for OMI Vulnerability Exploitation with Azure Sentinel
  43. Unusual MIRAI variant looks for mining infrastructure
  44. Microsoft Sentinel Notebooks Ninja Part 2: Getting Started with Microsoft Sentinel Notebooks
  45. Azure Sentinel Notebooks - Azure cloud support, new visualizations
  46. Azure Sentinel Information Model Fall Release: Speed & Ease
  47. What's New: Azure Sentinel - SOC Process Framework 8 Part Video Series!
  48. Check the health of your exported Microsoft Sentinel logs in your ADX cluster
  49. Microsoft Sentinel Ninja Training - the Sept 2021 update
  50. Introducing: Azure Sentinel Data Exploration Toolset (ASDET)
  51. Alert enrichment "how to reduce incident triage and investigation times using dynamic alert details”
  52. Becoming a Microsoft Sentinel Notebooks Ninja - The Series!
  53. Ingestion Cost Spike detection Playbook
  54. What's new: Microsoft Sentinel Ninja Training Knowledge Check
  55. What's new: Azure Sentinel new onboarding/offboarding API
  56. What's new: Incident advanced search is now public!
  57. What’s new: Fusion Detection for Ransomware
  58. Azure Sentinel SQL Solution Query Deep-Dive
  59. What's new: Watchlists templates are now in public preview!
  60. What's new: ASIM File Activity schema
  61. Understanding API connections for your Microsoft Sentinel Playbooks
  62. Microsoft Threat Intelligence Matching Analytics
  63. Software Defined Monitoring - Using Automated Notebooks and Azure Sentinel to Improve Sec Ops
  64. What's new: IdentityInfo table is now in public preview!
  65. What's New: Updated Microsoft Sentinel Documentation July Edition
  66. Integrating SIEM + XDR: Azure Sentinel and Azure Defender bi-directional incident sync
  67. What’s New: Azure Sentinel Hunting supports ADX cross-resource queries
  68. Azure Sentinel Solutions for Partners: Build Combined Value for a Wider Audience
  69. Watchlist is now Generally Available
  70. What's new: ASIM Authentication, Process, Registry and enhanced Network schemas
  71. Testing the New Version of the Windows Security Events Connector with Azure Sentinel To-Go!
  72. Moving Azure Activity Connector to an improved method
  73. Join in the Azure Sentinel Hackathon 2021!
  74. What's New: Microsoft Sentinel Watchlist Support for ARM Templates!
  75. Enhanced Azure Sentinel Alert remediation in the SOC Process Framework
  76. What’s New: Azure Sentinel Update Watchlist UI Enhancements
  77. What's new: Azure Sentinel Information Model DNS Schema and normalized content now public
  78. Microsoft Defender Security Insights in Azure Sentinel
  79. Announcing pricing changes to Azure Sentinel and Azure Monitor Log Analytics to help you save costs
  80. What’s new: customize entity page timeline!
  81. Azure Sentinel PowerShell Module Az.SecurityInsights has been released to GA!
  82. Who Watches the SOC Team? Enabling Audit/Risk Teams to Monitor the SOC
  83. Announcing 15+ New Azure Sentinel Data Connectors
  84. Democratize Machine Learning with Customizable ML Anomalies
  85. RSA Conference 2021: New innovations for Azure Sentinel
  86. Introducing Azure Sentinel Solutions!
  87. What’s new: IP entity page
  88. What's new: Incident Team - collaborate in Microsoft Teams
  89. What’s new: Hunting dashboard refresh
  90. What's New: Fusion Advanced Multistage Attack Detection Scenarios with Scheduled Analytics Rules
  91. What's New: Azure Sentinel - SOC Process Framework Workbook
  92. Automate Incident Assignment with Shifts for Teams
  93. Azure Sentinel Side-by-Side with Splunk via EventHub
  94. What’s New: Azure Sentinel: Zero Trust (TIC3.0) Workbook
  95. MSTICPy and Jupyter Notebooks in Azure Sentinel, an update
  96. Non-interactive logins: minimizing the blind spot
  97. What’s new: Incident timeline
  98. How to use Azure Sentinel for Incident Response, Orchestration and Automation
  99. Group-IB Threat Intelligence and Attribution Connector - Azure Sentinel
  100. IoT Asset discovery based on FW logs
  101. Web Shell Threat Hunting with Azure Sentinel
  102. Best practices for migrating detection rules from ArcSight, Splunk and QRadar to Azure Sentinel
  103. What’s new: Automation rules
  104. Monitoring the Software Supply Chain with Azure Sentinel
  105. What’s new: Alert Enrichment – Custom Details and Entity Mapping
  106. Whats new: Azure Sentinel and Microsoft 365 Defender incident integration
  107. Microsoft Ignite 2021: Blob and File Storage Investigations
  108. Visibility of Azure key vault activity in Sentinel Azure Key Vault Workbook
  109. Utilize Watchlists to Drive Efficiency During Microsoft Sentinel Investigations
  110. Microsoft Ignite 2021: What's New in Azure Sentinel
  111. 30+ New Azure Sentinel Data Connectors
  112. Jupyter Notebook Pivot Functions
  113. Handling false positives in Azure Sentinel
  114. Use Microsoft Azure Sentinel and Anomali Match for actionable threat detection
  115. What's new: User and Entity Behavior Analytics (UEBA) insights in the entity page!
  116. The Toolkit for Data-Driven SOCs
  117. Categorizing Microsoft alerts across data sources in Azure Sentinel
  118. Bring Remediation Steps into Azure Sentinel
  119. Migrating QRadar offenses to Microsoft Sentinel
  120. Automatically disable On-prem AD User using a Playbook triggered in Azure
  121. What's New: Cybersecurity Maturity Model Certification (CMMC) Workbook in Public Preview
  122. Centralize your security response with Azure Sentinel & PagerDuty
  123. Using NXLog to enhance Azure Sentinel’s ingestion capabilities
  124. Azure Sentinel All-In-One Accelerator
  125. What’s New: Support for formatted comments and comments editing and deleting!
  126. Move Your Microsoft Sentinel Logs to Long-Term Storage with Ease
  127. New Year - New Official Azure Sentinel PowerShell Module!
  128. Protecting your DocuSign Agreements with Microsoft Sentinel
  129. Bring Threat Intelligence from IntSights Using TAXII Data Connector
  130. What’s new: Dedicated clusters for Microsoft Sentinel
  131. What’s new: Managed Identity for Azure Sentinel Logic Apps connector
  132. Handling ingestion delay in Azure Sentinel scheduled alert rules
  133. What's New: Improved Analytics Preview Graph in Public Preview !
  134. The Ninja Training 2021 edition is out!
  135. The FAQ companion to the Azure Sentinel Ninja training

2020 136

  1. Ingestion Cost Alert Playbook
  2. Data Connector Health - Push Notification Alerts
  3. SolarWinds Post-Compromise Hunting with Azure Sentinel
  4. Microsoft Cloud App Security (MCAS) Activity Log in Azure Sentinel
  5. What's new: Improvements to the Log Analytics Agent
  6. Bring threat intelligence from Sixgill using TAXII Data Connector
  7. How to setup a Canarytoken and receive incident alerts on Azure Sentinel
  8. What's New: 80 out of the box hunting queries!
  9. What's New: Azure Sentinel Logic Apps Connector improvements and new capabilities
  10. Using the VirusTotal V3 API with MSTICPy and Azure Sentinel
  11. How to export data from Splunk to Azure Sentinel
  12. Using Azure Data Explorer for long term retention of Microsoft Sentinel logs
  13. Hunting for Barium using Azure Sentinel
  14. What's new: Monitoring your Logic Apps Playbooks in Azure Sentinel
  15. What’s new: Microsoft 365 Defender connector now in Public Preview for Microsoft Sentinel
  16. What's New: Multiple playbooks to one analytic rule
  17. Deploying and Managing Azure Sentinel - Ninja style
  18. New Azure Kubernetes Service (AKS) Security Workbook
  19. O365 & AAD Multi-Tenant Custom Connector - Azure Sentinel
  20. Guided UEBA Investigation Scenarios to empower your SOC
  21. SOC Prime O365 rules and more now offered free, exclusively to Azure Sentinel users
  22. Announcing the Investigation Insights Workbook
  23. Expanding Microsoft Teams Log Data in Azure Sentinel
  24. What’s New: Entity Insights for Convenient Investigation Checks is Now in Public Preview
  25. Playbooks & Watchlists Part 2: Automate incident response for Deny-list/Allow-list
  26. Playbooks & Watchlists Part 1: Inform the subscription owner
  27. What's new: Watchlist is now in public preview!
  28. Using Jupyter Notebook to analyze and visualize Azure Sentinel Analytics and Hunting Queries
  29. Aggregating Insider Risk Management Information via Azure Sentinel
  30. What's new: New Fusion detections and BYOML in public preview!
  31. What’s New: HTML and Markdown support for incident comment
  32. Build-Your-Own Machine Learning detections in the AI immersed Azure Sentinel SIEM
  33. Azure Sentinel To-Go (Part2): Integrating a Basic Windows Lab 🧪 via ARM Templates 🚀
  34. Watching the Watchers: Monitoring Azure Sentinel Query Activity for Malicious Activity.
  35. Understanding Microsoft Teams Data Schema in Azure Sentinel - Analyst / Researcher View
  36. Auditing Microsoft Sentinel activities
  37. Enriching Windows Security Events with Parameterized Function
  38. Analysing Web Shell Attacks with Azure Defender data in Azure Sentinel
  39. What's new: Azure Sentinel User and Entity Behavior Analytics in Public Preview!
  40. What's New: PowerShell+Azure Sentinel notebooks to supercharge your hunting and investigations!
  41. What's new: The new Azure Sentinel Notebooks experience is now in public preview!
  42. What's new: Threat Intelligence menu item in Public Preview!
  43. Stay ahead of threats with new innovations from Azure Sentinel
  44. How to align your Analytics with time windows in Azure Sentinel using KQL (Kusto Query Language)
  45. What's new: Analytics FileHash entity hits GA!
  46. What’s new: Office 365 Advanced Threat Protection connector in Public Preview
  47. Microsoft Sentinel Incident Bi-directional sync with ServiceNow
  48. What’s New: Cross-workspace Analytics Rules
  49. How to Protect Office 365 with Azure Sentinel
  50. What’s new: Azure DDoS Protection connector in Public Preview for Azure Sentinel
  51. What’s new: Microsoft Teams connector in Public Preview
  52. How to integrate vulnerability management in Azure Sentinel
  53. What’s New: Azure Firewall Connector in Public Preview!
  54. Remediate Vulnerable Secure Channel Connections with the Insecure Protocols Workbook
  55. What’s New: Query line numbering, Azure Sentinel in the schema pane
  56. MSTIC Notebooklets - Fast Tracking CyberSec Jupyter Notebooks
  57. Monitoring Azure Kubernetes Service (AKS) with Microsoft Sentinel
  58. Announcing a new Azure Sentinel GitHub Leaderboard!
  59. Accelerate your Azure Sentinel Deployment with this Azure DevOps Boards Template
  60. Guided Hunting Notebook: Base64-Encoded Linux Commands
  61. Secure your Calls- Monitoring Microsoft TEAMS CallRecords Activity Logs using Azure Sentinel
  62. Ingesting log files from AWS S3 using AWS Lambda
  63. Azure Sentinel Insecure Protocols Workbook Reimagined
  64. What’s new: SOC operational metrics now available in Microsoft Sentinel
  65. What's new: Azure Sentinel and Microsoft Defender ATP improved alert integration
  66. Announcing the Azure Sentinel Hackathon winners
  67. What's New: Incident Auto-refresh hits GA!
  68. Enrich Azure Sentinel security incidents with the RiskIQ Intelligence Connector
  69. Azure Sentinel Ninja Training: The July 2020 update
  70. New Azure Sentinel connectors
  71. Hunting the Clues- Azure Sentinel Administrative Suspicious Activities Library
  72. What's New: Cross Workspace Hunting is now available!
  73. Microsoft Sentinel Workbooks 101 (with sample Workbook)
  74. What's New: Azure Sentinel Machine Learning Behavior Analytics: Anomalous RDP Login Detection
  75. Azure Sentinel Side-by-Side with QRadar
  76. Microsoft Sentinel API 101
  77. Handling sliding windows in Azure Sentinel rules
  78. Monitoring SQL Server with Azure Sentinel
  79. New Azure Sentinel notebook experience and the retirement of the Azure Notebooks service preview
  80. Hunting for anomalous sessions in your data with Azure Sentinel
  81. Automating the onboarding on-premises, AWS and GCP VMs on Sentinel with Azure Arc
  82. Azure Sentinel Ninja Training: The June 2020 update
  83. What's New: Livestream for Azure Sentinel is now released for General Availability
  84. Using external data sources to enrich network logs using Azure storage and KQL
  85. MAY THE "TI" BE WITH YOU: Connect ThreatConnect TIP with Azure Sentinel
  86. Protecting your GitHub assets with Azure Sentinel
  87. Sending enriched Microsoft Sentinel alerts to 3rd party SIEM and Ticketing Systems
  88. Web shell threat hunting with Azure Sentinel and Microsoft Threat Protection
  89. Azure Security Center Auto-connect to Sentinel
  90. What’s New: Azure Sentinel Threat Hunting Enhancements
  91. Secure Working from Home – Deep Insights at Enrolled MEM Assets via Azure Sentinel
  92. Protecting MSSP’s Intellectual Property in Microsoft Sentinel
  93. Making your Microsoft Sentinel Workbooks multi-tenant (or multi-workspace)
  94. Approximate, partial and combined lookups in Azure Sentinel
  95. Integrating open source threat feeds with MISP and Sentinel
  96. Using Azure Playbooks to import text-based threat indicators to Azure Sentinel
  97. Using the Sentinel API to view data in a Workbook
  98. What's New: Cross Workspace Incident View in Public Preview!
  99. Kicking off the Azure Sentinel Hackathon!
  100. Monitoring Windows Virtual Desktop environments (Fall 2019 release) with Microsoft Sentinel
  101. Graph Visualization of External Teams Collaborations in Azure Sentinel
  102. Monitoring Zoom with Azure Sentinel
  103. Hunting Threats on Linux with Azure Sentinel
  104. Azure Sentinel Sigma & SOC Prime Integration (Part 3): Deploy to multiple workspaces and tenants
  105. Creating digital tripwires with custom threat intelligence feeds for Azure Sentinel
  106. Gain Compliance, Posture, and Protection Insights with this Azure Security Center Related Workbook
  107. Become a Microsoft Sentinel Ninja: The complete level 400 training
  108. Controlling access to Azure Sentinel Data: Resource RBAC
  109. Enriching Azure Sentinel with Azure AD information
  110. Azure Sentinel Sigma & SOC Prime Integration (Part 2): Directly deploy to Azure Sentinel
  111. Help for Security Operations Centers facing new challenges
  112. What’s New: Improved Incident Closing Experience is now Available!
  113. Enabling security research & hunting with open source IoT attack data
  114. Azure Sentinel Resource Terminus - board here!
  115. Quick wins - Identify signs of intrusions in real time with Microsoft Sentinel Livestreams
  116. Usage reporting for Azure Sentinel
  117. Protecting your Teams with Azure Sentinel
  118. Azure Sentinel To-Go (Part1): A Lab w/ Prerecorded Data 😈 & a Custom Logs Pipe via ARM Templates 🚀
  119. Compliance Reporting for Azure
  120. Ingest Fastly Web Application Firewall logs into Azure Sentinel
  121. Access Azure Sentinel Log Analytics via API (Part 1)
  122. Azure Sentinel Sigma and SOC Prime Integration (Part 1): Convert Sigma rules to Azure Sentinel
  123. Connect X-Force Exchange API on Microsoft Sentinel
  124. Ingesting Auditd (configured for PAM TTY Session Key Logging) into Azure Sentinel
  125. Azure Sentinel Side-by-Side with Splunk
  126. Combining Azure Lighthouse with Microsoft Sentinel’s DevOps capabilities
  127. Azure Sentinel Insecure Protocols Workbook Implementation Guide
  128. What’s New: Reduce alert noise with Incident settings and alert grouping in Azure Sentinel
  129. Scaling Up Syslog CEF Collection
  130. Office 365 Email Activity and Data Exfiltration Detection
  131. Bring your threat intelligence to Microsoft Sentinel
  132. Explorer Notebook Series: The Linux Host Explorer
  133. Deploying and Managing Microsoft Sentinel as Code
  134. Extending Azure Sentinel: APIs, Integration and management automation
  135. Implementing Lookups in Azure Sentinel
  136. Ingesting Alien Vault OTX Threat Indicators into Azure Sentinel

2019 48

  1. Ingest Box.com activity events via Microsoft Cloud App Security into Azure Sentinel
  2. Ingest Sample CEF data into Azure Sentinel
  3. Azure Sentinel correlation rules: the join KQL operator
  4. Using Azure Lighthouse and Azure Sentinel to Investigate Attacks Across Multiple Tenants
  5. Ingest Office 365 DLP Events into Azure Sentinel
  6. Azure Sentinel correlation rules: Active Lists out; make_list() in, the AAD/AWS correlation example
  7. Hunting for Capital One Breach TTPs in AWS logs using Azure Sentinel - Part II
  8. Best Practices for Common Event Format (CEF) collection in Azure Sentinel
  9. Hunting for Capital One Breach TTPs in AWS logs using Azure Sentinel - Part I
  10. Azure Sentinel – Microsoft Ignite 2019 Recap
  11. Using the new built-in URL detonation in Azure Sentinel
  12. Azure Sentinel and Azure Arc
  13. Try Azure Sentinel Alongside Your Existing SIEM
  14. Ingesting Office 365 Alerts with Graph Security API
  15. Upcoming Azure Sentinel training webinars
  16. How to use Azure Sentinel to follow a Users travel and map their location
  17. How to use Azure Monitor Workbooks to map Sentinel data
  18. Table Level RBAC In Microsoft Sentinel
  19. Azure Sentinel at Microsoft Ignite
  20. New: Per data type retention is now available for Azure Sentinel
  21. Identifying Threat Hunting opportunities in your data
  22. What am I looking at? - Using Notebooks to gain situational awareness.
  23. Using Threat Intelligence in your Jupyter Notebooks
  24. Azure Sentinel is now Generally Available!
  25. Azure Sentinel: Creating Custom Connectors
  26. Preparing towards Azure Sentinel's GA
  27. Best practices for designing a Microsoft Sentinel or Azure Defender for Cloud workspace
  28. Upcoming Changes to Fusion in Azure Sentinel
  29. Azure Sentinel Agent: Collecting from servers and workstations, on-prem and in the cloud
  30. Azure Sentinel: The connectors grand (CEF, Syslog, Direct, Agent, Custom and more)
  31. Azure Sentinel: Collecting logs from Microsoft Services and Applications
  32. Detect Network beaconing via Intra-Request time delta patterns in Azure Sentinel
  33. Tip: Easily use JSON fields in Sentinel
  34. Sending Proofpoint TAP logs to Azure Sentinel
  35. Microsoft Sentinel Blog - Table of Contents
  36. Using KQL functions to speed up analysis in Azure Sentinel
  37. msticpy - Python Defender Tools
  38. Time Series visualization of Palo Alto logs to detect data exfiltration
  39. Importing Sigma Rules to Azure Sentinel
  40. Looking for unknown anomalies - what is normal? Time Series analysis & its applications in Security
  41. Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 3
  42. Sending REST API data to Azure Sentinel
  43. Time series analysis applied in a security hunting context
  44. Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2
  45. Integrating Azure Security Center with Azure Sentinel
  46. Why Use Jupyter for Security Investigations?
  47. Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 1
  48. Azure Sentinel: Performing Additional Security Monitoring of High-Value Accounts