Sentinel
→
Sentinel Saturdays: Use External Data Sources in Your Threat Hunts
Sometimes the data you need to hunt threats isn’t inside Sentinel. Maybe it’s a CSV on GitHub containing known malicious
Microsoft Security
→
Sentinel Saturdays: Tag and Track Incidents with Custom Incident Labels
Incident management can quickly become messy when multiple analysts are working through the queue. Custom incident labels in Microsoft Sentinel help bring
Security
→
Useful tools for the SOC
In a modern Security Operations Centre (SOC), time is everything. Analysts are often under pressure to triage alerts, investigate indicators, and respond
Sentinel
→
Sentinel Skills Saturday - Edition 1.
What the heck is Sentinel Skills Saturday?! I have an idea to showcase features within Sentinel and assist with sharing skills every
Identity
→
Protecting against ClickFix with the Microsoft Stack
Introduction With the growing rise of cyber attacks, and the increased detections and awareness on the back of this, cyber attacks are
Identity
→
Restoring Microsoft Entra Conditional Access Policies
Microsoft have now added the ability to restore Conditional Access Policies which have been deleted in Microsoft Entra. This is really useful
Email
→
Protecting against Email Bombs with Microsoft Tooling
As the world becomes more and more connected, and digital technologies continue to evolve, email remains a critical tool for communications both
Microsoft Security
→
Application Control - Part 1 - The dangers of allowing software
ℹ️This blog post is part of a series of posts that delve into Application Control on Windows. This series will explore