Gennaro Migliaccio

The Technical Brain Dump of Cyber Security

  • Contact Me
  • Home
  • Privacy Policy

Tag: Sentinel

  • Sentinel

Microsoft Sentinel – Using Watchlists

Posted on May 12, 2025May 12, 2025 by Gennaro Migliaccio

This article details using Watchlists with Microsoft Sentinel, including how to get a Watchlist setup and example KQL queries.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged Microsoft, Security, Sentinel, SIEM, WatchlistLeave a Comment on Microsoft Sentinel – Using Watchlists

Microsoft Sentinel – Azure Activity Scoped by Management Groups

Posted on March 10, 2025March 10, 2025 by Gennaro Migliaccio

This guide details the configuration for Azure Activity Scoped by Management Groups, as well as scoping by Subscription.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, Azure Activity, Cloud, Microsoft, Security, Sentinel, SIEMLeave a Comment on Microsoft Sentinel – Azure Activity Scoped by Management Groups

Microsoft Sentinel – Archiving Logs Guide

Posted on March 3, 2025March 3, 2025 by Gennaro Migliaccio

This guide covers the methods of archiving logs within Microsoft Sentinel, including how to bulk update tables via Cloud Shell.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged archive, azure, Cloud, Logs, Microsoft, retention, Security, Sentinel, SIEM2 Comments on Microsoft Sentinel – Archiving Logs Guide

Microsoft Sentinel – KQL Cheat Sheet

Posted on February 25, 2025February 25, 2025 by Gennaro Migliaccio

This page contains the download link for the KQL Cheat Sheet, that contains key information on Microsoft Sentinel.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged KQL, Microsoft, Security, Sentinel, SIEMLeave a Comment on Microsoft Sentinel – KQL Cheat Sheet

Microsoft Sentinel – Cheat Sheet

Posted on February 3, 2025February 3, 2025 by Gennaro Migliaccio

This page contains the download link for the Microsoft Sentinel Cheat Sheet, that contains key information on Microsoft Sentinel.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, Cloud, Microsoft, Security, Sentinel, SIEM1 Comment on Microsoft Sentinel – Cheat Sheet

Microsoft Sentinel – Ingesting Intune Logs

Posted on January 27, 2025January 27, 2025 by Gennaro Migliaccio

This post details the configuration steps for ingesting Intune logs in Microsoft Sentinel and looks at some of the use cases for doing so.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, Cloud, Intune, Logs, Microsoft, Security, Sentinel, SIEM2 Comments on Microsoft Sentinel – Ingesting Intune Logs

Microsoft Sentinel – Optimise costs

Posted on January 20, 2025January 20, 2025 by Gennaro Migliaccio

This post looks to detail how to optimise costs with Microsoft Sentinel by using Commitment Tiers & Pre-Purchase Plans.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, Cloud, cost, Microsoft, optimisation, Security, Sentinel, SIEM1 Comment on Microsoft Sentinel – Optimise costs

Microsoft Sentinel – Microsoft365 Quick Start Guide

Posted on January 13, 2025February 24, 2025 by Gennaro Migliaccio

This article provides a quick start guide on using Microsoft Sentinel with Microsoft365, and focuses on a data connectors & analytical rules.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, EntraID, Microsoft, Microsoft365, Security, Sentinel, SIEM2 Comments on Microsoft Sentinel – Microsoft365 Quick Start Guide

Microsoft Sentinel – Automation Examples

Posted on January 7, 2025January 7, 2025 by Gennaro Migliaccio

This post looks at automation examples in Microsoft Sentinel to showcase some key use cases for automating tasks.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged Automation, azure, Cloud, Microsoft, Playbooks, Security, Sentinel, SIEM1 Comment on Microsoft Sentinel – Automation Examples

Microsoft Sentinel – Migrating to another Subscription

Posted on December 17, 2024December 17, 2024 by Gennaro Migliaccio

This post details a few options for migrating Microsoft Sentinel between Azure subscriptions and resource groups.

Continue Reading
Posted in Cloud, Cyber Security, Microsoft SentinelTagged azure, Cloud, Microsoft, Migration, Security, Sentinel, SIEM2 Comments on Microsoft Sentinel – Migrating to another Subscription

Posts navigation

Older posts
Recent Posts
  • Entra ID – Restrict User Device Registration
  • Microsoft Sentinel – Using Watchlists
  • Microsoft Defender – Device Actions Cheat Sheet
  • Microsoft Defender – Cheat Sheet
  • Defender for Endpoint – Device Tagging
Categories
  • Cloud
  • Cyber Security
  • Entra ID
  • Hacking Guides
  • How to
  • Microsoft Sentinel
  • Uncategorized

About the Author

Gennaro Migliaccio has been doing IT for 15 years. Starting out with fixing games consoles to now being a Cyber Security Specialist.

  • LinkedIn
  • YouTube
  • GitHub
WordPress Theme: blogeasy by ThemesPoint.