SIEM Archives - Gennaro Migliaccio

Microsoft Sentinel – Mimecast Data Connector

This post details the Mimecast Data Connector for Microsoft Sentinel and how to configure the ingestion of logs into Microsoft Sentinel.

This article focuses and explores the new Data Federation in Data Connectors functionality in Microsoft Sentinel.

This article provides a checklist of Microsoft Sentinel data source onboarding considerations when looking to ingest data from new sources.

This article details using Watchlists with Microsoft Sentinel, including how to get a Watchlist setup and example KQL queries.

This guide details the configuration for Azure Activity Scoped by Management Groups, as well as scoping by Subscription.

This guide covers the methods of archiving logs within Microsoft Sentinel, including how to bulk update tables via Cloud Shell.

This page contains the download link for the KQL Cheat Sheet, that contains key information on Microsoft Sentinel.

This page contains the download link for the Microsoft Sentinel Cheat Sheet, that contains key information on Microsoft Sentinel.

This post details the configuration steps for ingesting Intune logs in Microsoft Sentinel and looks at some of the use cases for doing so.

This post looks to detail how to optimise costs with Microsoft Sentinel by using Commitment Tiers & Pre-Purchase Plans.