Topic

Sentinel

Posts tagged with Sentinel.

Sentinel Saturday - Are your analytics rules actually doing what you think?
Microsoft Security

Sentinel Saturday - Are your analytics rules actually doing what you think?

Microsoft Sentinel analytics rules are often treated as a finished product. Once enabled they are assumed to be working quietly in the

Dec 20, 20252 min read
→
Sentinel Saturday - Using Tasks with Automation
Security

Sentinel Saturday - Using Tasks with Automation

Automation is one of the biggest ways to improve output and productivity within Microsoft Sentinel. When used well, it cuts repetitive work,

Nov 22, 20253 min read
→
Sentinel Saturdays: Automating the common tasks
Sentinel

Sentinel Saturdays: Automating the common tasks

Introduction If you find yourself performing the same response steps over and over, it’s time to bring Playbooks into your workflow.

Nov 8, 20251 min read
→
Sentinel Saturdays: Use External Data Sources in Your Threat Hunts
Sentinel

Sentinel Saturdays: Use External Data Sources in Your Threat Hunts

Sometimes the data you need to hunt threats isn’t inside Sentinel. Maybe it’s a CSV on GitHub containing known malicious

Nov 1, 20251 min read
→
Sentinel Saturdays: Tag and Track Incidents with Custom Incident Labels
Microsoft Security

Sentinel Saturdays: Tag and Track Incidents with Custom Incident Labels

Incident management can quickly become messy when multiple analysts are working through the queue. Custom incident labels in Microsoft Sentinel help bring

Oct 25, 20251 min read
→
Sentinel Skills Saturday  - Edition 1.
Sentinel

Sentinel Skills Saturday - Edition 1.

What the heck is Sentinel Skills Saturday?! I have an idea to showcase features within Sentinel and assist with sharing skills every

Oct 18, 20252 min read
→