There are many things to consider when implementing Microsoft Sentinel, such as: defining objectives, assessing environments, designing architecture, managing user access, and ensuring continuous improvement.
Whats happening in the market so far in regards to SIEM? How has XDR, Zero Trust and AI impacted the SIEM Market?
Having issues with expired certificates with Azure Arc enabled machines? This guide will give you the quick fix to reenabling Azure Arc.
SIEM technology began in the 1990s to centralise logs, evolved to real-time event analysis, and now uses machine learning for proactive threat detection.
Microsoft Sentinel requires understanding SIEM concepts and terminology including SOC, SOAR, parsing, syslog, CEF, LEEF, CTI, TAXII, and STIX. Future posts will explore these further.
A quick article on Yubikeys and how they can be a cost effective means of improving your Security.
Quick guide on discovering and controlling your users from using their account as a guest account on another tenant.
This article looks to simplify the methods of device management with AD and Azure AD.
Article on what iOS Supervised Mode is and the ways we can configure it.
Hacking doesn’t always need to be done with a computer, it can be done with words.
