Posts

Microsoft Sentinel

The KQL Playbook (Play #3): Mastering Strings, Timestamps, and Ugly JSON

Microsoft Sentinel

The KQL Playbook (Play #2): Mastering the Matching Game

Automation

The Self-Updating Watchlist: Automating Sentinel with Logic Apps & Graph API

Unlocking Sentinel's True Power: A Guide to the Graph API and Logic Apps

Microsoft Sentinel

Herding Cats with Sentinel: An In-Depth Guide to Workspace Manager

The 7 Deadly Sins of a Microsoft Sentinel Deployment

Microsoft Sentinel

Beyond the Basics: Forging Your Own Custom Detections in Defender XDR

Microsoft Sentinel

Hunting Ransomware in Storage Accounts (When You Can't Afford Defender)

Microsoft Sentinel

The "Undo" Button for Sentinel Logs: An In-Depth Guide to Purging Data

Microsoft Sentinel

Sentinel's Built-in Consultant: An In-Depth Guide to SOC Optimization

Microsoft Sentinel

Microsoft Threat Intelligence: Giving Your Sentinel a Brain

Microsoft Sentinel

Sentinel's Endgame Gear: Sentinel Data Lake