CipherX9F Security·Nov 1How to ingest Windows Event Logs into Microsoft Sentinel with Azure Arc, AMA and XPath?Hands-on lab notes: a Windows 11 machine, onboarded with Azure Arc, sending Application, System, Setup and Security logs to Sentinel…
CipherX9F Security·Oct 11How to Ingest Custom Application Text Logs into Microsoft Sentinel Using AMA/DCR?Last time, I turned an Ubuntu VM into a collector for FortiGate firewall logs. That was the syslog world, a device sends messages over the…
InAxonect BlogbyManusha Hewage·Oct 9From Logs to Insights: Monitoring Azure Arc Servers with Custom MetricsManaging hybrid environments can be challenging, especially when you need visibility across both cloud and on-premises workloads. Azure Arc…
CipherX9F Security·Sep 19How to ingest On-Prem Linux Server Logs into Micrososft Sentinel using Azure Arc and AMA?If you’ve spent any time around Microsoft Sentinel over the last couple of years, you’ve probably noticed the writing on the wall for the…
CipherX9F Security·Aug 27How to Ingest Microsoft Entra ID Logs into Microsoft Sentinel?If you’ve ever set up a SOC workspace from scratch, you already know that identity logs are usually the first thing you want flowing in…
CipherX9F Security·Aug 23How to Ingest On-Prem IIS Logs into Microsoft Sentinel Using Azure Arc and AMA?In this lab, I wanted to go further and build something closer to a real-world scenario, take a Windows Server 2022 virtual machine running…
CipherX9F Security·Aug 21How to ingest On-Prem Windows Server Logs into Microsoft Sentinel?Microsoft Sentinel is a cloud-native SIEM that’s built to pull in security data from Azure resources, Microsoft services, on-premises…
Omer Mohamed·Jul 2Building an End-to-End Microsoft Sentinel SOC Lab with Azure Arc, AMA, and KQLI wanted to build a Microsoft Sentinel project that went beyond enabling a connector and running a basic query. My goal was to create a…
Pritiranjan Pradhan·Jun 5Microsoft Sentinel & Active Directory SOC Lab Part 2Sysmon Telemetry & Microsoft Sentinel Integration
Mechanics Team·May 8Azure Arc | On-prem + Multi-cloud ManagementManaging Servers, and Kubernetes across on-prem, and multiple clouds, can quickly become complex, especially when you’re juggling multiple…
