CipherX9F Security·2d agoHow to Ingest PowerShell Event Logs into Microsoft Sentinel Using Azure Monitor Agent (AMA) and…A hands-on lab write-up - Windows 11, Azure Monitor Agent, a custom DCR and a lot of test commands
CipherX9F Security·Nov 1How to ingest Windows Event Logs into Microsoft Sentinel with Azure Arc, AMA and XPath?Hands-on lab notes: a Windows 11 machine, onboarded with Azure Arc, sending Application, System, Setup and Security logs to Sentinel…
CipherX9F Security·Oct 27How I Built a Secure Azure Web Application Using Key Vault, Managed Identity, Azure SQL and…Why I built this lab
CipherX9F Security·Oct 18How I Built an Entra ID Inventory Application Using Certificate and Client Secret Authentication…Creating an App Registration, Configuring Certificates and Secrets, Authenticating with Microsoft Graph, Running Inventory Scripts, and…
InSystem WeaknessbyWilliam | SOC and Detection Engineering·Oct 15My Azure Policy Assignment Succeeded. I Still Needed to Find the Logs.Part 2 of 7: Connecting and validating the first data source in my Microsoft Sentinel SOC lab.
CipherX9F Security·Oct 11How to Ingest Custom Application Text Logs into Microsoft Sentinel Using AMA/DCR?Last time, I turned an Ubuntu VM into a collector for FortiGate firewall logs. That was the syslog world, a device sends messages over the…
CipherX9F Security·Oct 3How to Ingest Free AlienVault OTX Threat Intelligence into Microsoft Sentinel Using the TAXII…I wanted to test how easily a free threat intelligence feed could be connected to Microsoft Sentinel without building a custom integration…
CipherX9F Security·Sep 26How to ingest FortiGate Firewall logs to Microsoft Sentienl?If you search “how to ingest FortiGate logs into Microsoft Sentinel” you’ll find plenty of clean, linear tutorials that make it look like a…
CipherX9F Security·Sep 19How to ingest On-Prem Linux Server Logs into Micrososft Sentinel using Azure Arc and AMA?If you’ve spent any time around Microsoft Sentinel over the last couple of years, you’ve probably noticed the writing on the wall for the…
Tobi Oderinde·Sep 2The Silent Hang That Looked Like a Crash Loop: A Kubernetes Debugging StoryIf you work in DevOps long enough, you learn that the error message you’re chasing is often not the actual problem. This is a story about a…