Microsoft Sentinel & Azure Arc – Troubleshooting Windows Event Logs
This post details troubleshooting steps to take when Windows event logs are not being ingested into Microsoft Sentinel via Azure Arc VMs.
Category: Cloud
Microsoft Sentinel – Ingesting Windows Server Event Logs via Azure Arc
This post outlines the steps to ingest on-premises Windows event logs into Azure Sentinel using Azure Arc.
Microsoft Sentinel – Ingesting Windows Server Event Logs from Azure VMs
Ingesting Windows Server event logs into Microsoft Sentinel involves creating a Data Collection Rule for Azure VMs. Subsequent articles will cover on-premises methods.
Azure & Windows 11 – Issue with RDP using Entra ID Credentials
A quick workaround for RDP login issues with Entra ID credentials on a Windows 11 VM in Azure.
Microsoft Sentinel – Planning & Architecture
There are many things to consider when implementing Microsoft Sentinel, such as: defining objectives, assessing environments, designing architecture, managing user access, and ensuring continuous improvement.
Microsoft Sentinel – The Current Market for SIEM
Whats happening in the market so far in regards to SIEM? How has XDR, Zero Trust and AI impacted the SIEM Market?
Azure Arc Error – The Server Certificate has Expired
Having issues with expired certificates with Azure Arc enabled machines? This guide will give you the quick fix to reenabling Azure Arc.
Microsoft Sentinel – History of SIEM
SIEM technology began in the 1990s to centralise logs, evolved to real-time event analysis, and now uses machine learning for proactive threat detection.
Azure AD/Entra ID Guest Accounts – Limiting User Access to other Tenants
Quick guide on discovering and controlling your users from using their account as a guest account on another tenant.
Device Management Methods with Active Directory & Azure AD
This article looks to simplify the methods of device management with AD and Azure AD.