Microsoft Sentinel – Ingesting Windows Server Event Logs from Azure VMs
Ingesting Windows Server event logs into Microsoft Sentinel involves creating a Data Collection Rule for Azure VMs. Subsequent articles will cover on-premises methods.
Microsoft Sentinel – Configuring PowerBI for Advanced Reporting
Want more reporting in Microsoft Sentinel? Look no further, this guide will show you the steps to use PowerBI with Microsoft Sentinel.
Azure & Windows 11 – Issue with RDP using Entra ID Credentials
A quick workaround for RDP login issues with Entra ID credentials on a Windows 11 VM in Azure.
Microsoft Sentinel – Planning & Architecture
There are many things to consider when implementing Microsoft Sentinel, such as: defining objectives, assessing environments, designing architecture, managing user access, and ensuring continuous improvement.
Microsoft Sentinel – The Current Market for SIEM
Whats happening in the market so far in regards to SIEM? How has XDR, Zero Trust and AI impacted the SIEM Market?
Azure Arc Error – The Server Certificate has Expired
Having issues with expired certificates with Azure Arc enabled machines? This guide will give you the quick fix to reenabling Azure Arc.
Microsoft Sentinel – History of SIEM
SIEM technology began in the 1990s to centralise logs, evolved to real-time event analysis, and now uses machine learning for proactive threat detection.
Microsoft Sentinel – SIEM World Terminology
Microsoft Sentinel requires understanding SIEM concepts and terminology including SOC, SOAR, parsing, syslog, CEF, LEEF, CTI, TAXII, and STIX. Future posts will explore these further.
The Key to Strong, Affordable Authentication
A quick article on Yubikeys and how they can be a cost effective means of improving your Security.
Azure AD/Entra ID Guest Accounts – Limiting User Access to other Tenants
Quick guide on discovering and controlling your users from using their account as a guest account on another tenant.