Posts

SOC

KQL User Audit Playbook V2: The Insider Threat Investigation Guide

Microsoft Sentinel

Teams Threat Protection: What Actually Changed and What You Can Actually Hunt

SOC

Threat Analytics in Microsoft Defender: What It Actually Does and Why Your SOC Needs It

SOC

Hunting in Microsoft Sentinel: What Hunting Actually Is and Why You Need It

Sentinel Workbook

Three Essential Sentinel Workbooks You Should Deploy Right Now

Microsoft Sentinel

Sentinel Workbooks: Deploy and Customise Your First Dashboard

KQL

Beauty of Data Visualization in Microsoft Sentinel Using KQL

Microsoft's Defaults: Five Settings You Need to Fix Right Now

Defender XDR

Defender for Office 365 Policy Configuration: Anti-Phishing, Anti-Spam, Malware, Safe Links

Microsoft Sentinel

Is Defender for Office 365 worth it?

Microsoft Sentinel

UEBA in Microsoft Sentinel: Stop Wasting Time on Behavioral Analytics

KQL

Fixing Microsoft's Azure Brute Force Detection: Why Their Template Fires Constantly (And What You Should Change)