#microsoft-sentinel articles

THTopaz Hurvitzcloudsecops.hashnode.devAug 15 · 13 min read

Status-first: how to read Microsoft's AI security stack without overstating your coverage

At any moment a single Microsoft product surface holds some controls that are Generally Available, some in Public Preview, and some still on the roadmap. A team that reads one launch blog and draws a

0

KDKajal Dhanjalkajalbuilds.hashnode.devJun 21 · 9 min read

Building a Sentinel Detection Lab, Part 5: MFA Registration, a Missing License, and the First Detection That Talks Back

https://github.com/Kajal-Dhanjal/sentinel-detection-lab Part 4 ended on this note: moving off the endpoint entirely and into identity, starting with attackers registering their own MFA methods on com

0

KDKajal Dhanjalkajalbuilds.hashnode.devJun 21 · 6 min read

Building a Sentinel Detection Lab, Part 4: Catching Reconnaissance — and the Case-Sensitivity Bug That Made It Look Broken

https://github.com/Kajal-Dhanjal/sentinel-detection-lab This is Part 4 of the series where I build a Microsoft Sentinel detection engineering lab from scratch and write down what actually happened —

0

KDKajal Dhanjalkajalbuilds.hashnode.devJun 15 · 7 min read

Building a Sentinel Detection Lab, Part 1: Catching Brute Force (and the Bug That Flagged the Wrong Account)

Part 1 of a series on building a detection engineering lab in Microsoft Sentinel from scratch. This post: writing my first detection, and the parsing bug that taught me more than the detection itself.

0

TSTech Skill Schooltechskillschool.hashnode.devJun 10 · 7 min read

Start Your SOC Journey with SOC Analyst Training 101

In today’s digital landscape, cyber threats are evolving at an unprecedented pace. From ransomware attacks targeting critical infrastructure to sophisticated phishing campaigns and advanced persistent

0

ZOZeroTrust Opsnavyacyber.hashnode.devDec 29, 2025 · 3 min read

Day 10: Tinsel Triage – Surmounting the Azure Storm

The Mission: SOC Operations Under Siege The 24-hour "Boss Rush" has reached a fever pitch. The Best Festival Company’s Security Operations Center (SOC) is currently in chaos, with dashboards lighting up with a "digital thunderstorm" of alerts. The Ev...

0

JJebitoksharonjebitok.comDec 12, 2025 · 12 min read

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

This write-up came a little later than expected. The initial version of the Microsoft Sentinel environment was quite difficult to access, and it slowed down a lot of the hands-on progress. Thankfully, TryHackMe updated the Azure access, making everyt...

0

AGArthur Georgesecurecapital.hashnode.devSep 3, 2025 · 2 min read

Microsoft to Offer Discounted Cloud Services to U.S. Government

Microsoft has reached an agreement to provide discounted cloud services to U.S. federal agencies, the General Services Administration (GSA) announced Tuesday. The deal is part of a broader initiative by the administration to streamline technology pro...

0

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.ukJul 11, 2025 · 6 min read

Monitoring DNS Record Changes in Microsoft Sentinel

Overview. DNS record manipulation is a subtle yet powerful technique often used by threat actors to intercept communication, reroute authentication flows, or disrupt services. Despite its impact, DNS change monitoring is often overlooked in security ...

0

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.ukJul 10, 2025 · 9 min read

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration

Section 1: Cisco Umbrella Identity Federation Configuration. Introduction. Cisco Umbrella is a cloud-delivered security platform that provides DNS-layer protection, secure web gateway (SWG), cloud-delivered firewall, and cloud access security broker ...

0

#microsoft-sentinel

#microsoft-sentinel

Explore Hashnode

Trending tags this week

Status-first: how to read Microsoft's AI security stack without overstating your coverage

Building a Sentinel Detection Lab, Part 5: MFA Registration, a Missing License, and the First Detection That Talks Back

Building a Sentinel Detection Lab, Part 4: Catching Reconnaissance — and the Case-Sensitivity Bug That Made It Look Broken

Building a Sentinel Detection Lab, Part 1: Catching Brute Force (and the Bug That Flagged the Wrong Account)

Start Your SOC Journey with SOC Analyst Training 101

Day 10: Tinsel Triage – Surmounting the Azure Storm

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

Microsoft to Offer Discounted Cloud Services to U.S. Government

Monitoring DNS Record Changes in Microsoft Sentinel

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration

#microsoft-sentinel

Search Hashnode

#microsoft-sentinel

Explore Hashnode

Trending tags this week

Status-first: how to read Microsoft's AI security stack without overstating your coverage

Building a Sentinel Detection Lab, Part 5: MFA Registration, a Missing License, and the First Detection That Talks Back

Building a Sentinel Detection Lab, Part 4: Catching Reconnaissance — and the Case-Sensitivity Bug That Made It Look Broken

Building a Sentinel Detection Lab, Part 1: Catching Brute Force (and the Bug That Flagged the Wrong Account)

Start Your SOC Journey with SOC Analyst Training 101

Day 10: Tinsel Triage – Surmounting the Azure Storm

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

Microsoft to Offer Discounted Cloud Services to U.S. Government

Monitoring DNS Record Changes in Microsoft Sentinel

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration