Microsoft Sentinel – Data Federation in Data Connectors
This article focuses and explores the new Data Federation in Data Connectors functionality in Microsoft Sentinel.
Microsoft Defender – Cheat Sheet
This post contains the download link for my Microsoft Defender Cheat Sheet which details each of the Defender components.
Microsoft Sentinel – The Current Market for SIEM
Whats happening in the market so far in regards to SIEM? How has XDR, Zero Trust and AI impacted the SIEM Market?
Microsoft Sentinel – History of SIEM
SIEM technology began in the 1990s to centralise logs, evolved to real-time event analysis, and now uses machine learning for proactive threat detection.
Microsoft Sentinel – SIEM World Terminology
Microsoft Sentinel requires understanding SIEM concepts and terminology including SOC, SOAR, parsing, syslog, CEF, LEEF, CTI, TAXII, and STIX. Future posts will explore these further.