Ensure Critical Log Collection in Microsoft Sentinel
This solution was inspired by one of my customers. They wanted to know if they could use a Microsoft Sentinel Watchlist in combination with Usage logs »
Microsoft Sentinel Log4j Ubiquiti Analytic Rule
I created a quick Analytic Rule for those using Ubiquiti logs with Microsoft Sentinel. First of all, I just took two existing rules and made a »
Microsoft Sentinel Azure AD Connector Log Breakdown
I have been getting a lot of questions from customers about the configuration of the Azure AD Connector in Microsoft Sentinel. OK, I have not been »
Microsoft Sentinel Log Usage
Recently I had a customer, well more than one, that wanted to understand the usage and cost of their ingestion of log data into Sentinel. First, »
GCIA and Sentinel
Recently I completed my GCIA (GIAC Certified Intrusion Analyst) certification, which focuses on hunting for adversaries. The course and exam focus on monitoring, network traffic analysis, »