Microsoft Sentinel

Three Essential Sentinel Workbooks You Should Deploy Right Now

All right class. Workbooks That Actually Solve Problems Microsoft has

Sentinel Workbooks: Deploy and Customise Your First Dashboard

Welcome back class. You're running Sentinel. Logs are

Beauty of Data Visualization in Microsoft Sentinel Using KQL

Welcome back, class. Tables are useless at scale. You know

Defender for Office 365 Policy Configuration: Anti-Phishing, Anti-Spam, Malware, Safe Links

All right class. Microsoft's preset policies are marketing

Is Defender for Office 365 worth it?

All right class. Your email is already protected by Exchange

UEBA in Microsoft Sentinel: Stop Wasting Time on Behavioral Analytics

Welcome back, class. You've probably heard the pitch:

Fixing Microsoft's Azure Brute Force Detection: Why Their Template Fires Constantly (And What You Should Change)

All right class. Microsoft ships an out-of-the-box analytic rule for

Building a Brute Force Detection Query: How To Think Through Network Logon Failures

All right class, take your seats. This post is about

Continuous Export to Log Analytics: Getting Defender for Cloud Data Where You Need It

Alright, class. You've got Defender for Cloud on.

Post-Deployment Sentinel and Defender XDR: You're Not Done Yet

Alright, class. So you've deployed Sentinel. You'