#microsoft-sentinel

Day 10: Tinsel Triage – Surmounting the Azure Storm

The Mission: SOC Operations Under Siege The 24-hour "Boss Rush" has reached a fever pitch. The Best Festival Company’s Security Operations Center (SOC) is currently in chaos, with dashboards lighting up with a "digital thunderstorm" of alerts. The Ev...

Dec 29, 20253 min read

JJebitoksharonjebitok.com

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

This write-up came a little later than expected. The initial version of the Microsoft Sentinel environment was quite difficult to access, and it slowed down a lot of the hands-on progress. Thankfully, TryHackMe updated the Azure access, making everyt...

Dec 12, 202512 min read

AGArthur Georgesecurecapital.hashnode.dev

Microsoft to Offer Discounted Cloud Services to U.S. Government

Microsoft has reached an agreement to provide discounted cloud services to U.S. federal agencies, the General Services Administration (GSA) announced Tuesday. The deal is part of a broader initiative by the administration to streamline technology pro...

Sep 3, 20252 min read

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.uk

Monitoring DNS Record Changes in Microsoft Sentinel

Overview. DNS record manipulation is a subtle yet powerful technique often used by threat actors to intercept communication, reroute authentication flows, or disrupt services. Despite its impact, DNS change monitoring is often overlooked in security ...

Jul 11, 20256 min read

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.uk

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration

Section 1: Cisco Umbrella Identity Federation Configuration. Introduction. Cisco Umbrella is a cloud-delivered security platform that provides DNS-layer protection, secure web gateway (SWG), cloud-delivered firewall, and cloud access security broker ...

Jul 10, 20259 min read

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.uk

Microsoft Azure Lighthouse: Sentinel Across Multi-Tenant Environments.

Introduction. Security teams within Managed Security Service Providers (MSSPs) or multi-brand organisations often require visibility into several isolated Microsoft Sentinel instances. Without centralisation, analysts must switch between portals or a...

Jun 16, 20252 min read

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.uk

Microsoft Sentinel Rule Not Saving? - Here's Why (ETag Errors).

Introduction. While making a small update to an analytics rule in Microsoft Sentinel, I hit an unexpected roadblock. I tried saving the rule, and Sentinel threw this error: Failed to save analytics rule '[REDACTED]'. Conflict: Newer instance of rule...

Jun 13, 20251 min read

CDCiaran Doherty, AfCIIS, MBCSblog.cdoherty.co.uk

Using AbuseIPDB in Microsoft Sentinel for IP Reputation and Threat Enrichment.

This article is coming soon.

Apr 30, 20251 min read

COCelestina Odilitinatech.hashnode.dev

Configure and Deploy Microsoft Sentinel as a Security Information and Event Management (SIEM) Solution

Introduction In today’s digital landscape, protecting an organization’s IT infrastructure from evolving threats is more critical than ever. A robust Security Information and Event Management (SIEM) solution forms the backbone of modern cybersecurity ...

Dec 1, 20249 min read

ATAnshul Tiwaricsanshul.hashnode.dev

Lets explore SIEM

What is SIEM - SIEM stands for Security Information and Event Management Primary Function - This is a tool that collects information from various sources.It then aggregates and analyzes and creates security report What else can SIEM do - SIEM can per...

Aug 25, 20241 min read

Tag feed

#microsoft-sentinel

Tag feed

#microsoft-sentinel

Day 10: Tinsel Triage – Surmounting the Azure Storm

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

Microsoft to Offer Discounted Cloud Services to U.S. Government

Monitoring DNS Record Changes in Microsoft Sentinel

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration

Microsoft Azure Lighthouse: Sentinel Across Multi-Tenant Environments.

Microsoft Sentinel Rule Not Saving? - Here's Why (ETag Errors).

Using AbuseIPDB in Microsoft Sentinel for IP Reputation and Threat Enrichment.

Configure and Deploy Microsoft Sentinel as a Security Information and Event Management (SIEM) Solution

Lets explore SIEM

Trending tags this week

#microsoft-sentinel

Search Hashnode

#microsoft-sentinel

Day 10: Tinsel Triage – Surmounting the Azure Storm

SOC Alert Triaging - Tinsel Triage (TryHackMe) 🎉🧑‍🎄

Microsoft to Offer Discounted Cloud Services to U.S. Government

Monitoring DNS Record Changes in Microsoft Sentinel

Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration

Microsoft Azure Lighthouse: Sentinel Across Multi-Tenant Environments.

Microsoft Sentinel Rule Not Saving? - Here's Why (ETag Errors).

Using AbuseIPDB in Microsoft Sentinel for IP Reputation and Threat Enrichment.

Configure and Deploy Microsoft Sentinel as a Security Information and Event Management (SIEM) Solution

Lets explore SIEM

Trending tags this week