KEREM ÇELİKER·2h agoMicrosoft Sentinel ile SAP Application Güvenliği ve İzlenmesi (3 Bölüm)Bölüm 1: SAP’inin Microsoft Sentinel’e bağlanması ve sekronize çalıştırılması
Saif Khan·1d agoMicrosoft Sentinel SOAR: Automate Incident Response with Azure Logic AppsA Complete Hands-On Lab in the Microsoft Defender Portal
Saif Khan·2d agoBuilding a Password Spraying Detection Rule in Microsoft SentinelFrom KQL to SOC Incident in the Microsoft Defender Portal
Saif Khan·2d ago15 Essential KQL Queries Every Microsoft Sentinel SOC Analyst Should KnowA Practical Guide to Threat Hunting, Identity Monitoring, and Security Investigation
Saif Khan·2d agoMicrosoft Sentinel in the Defender Portal: A Complete Hands-On SetupFrom Zero to Your First SIEM Detection — A Practical Guide for Aspiring SOC Analysts and Security Engineers
Shahzaib Sajid·5d agoThe 60-70% False Positive Cut Wasn’t a Magic RuleWhat I learned about detection engineering after months of tuning SIEM alerts in an MSSP SOC
Alan Conlon·Nov 3Hunting Impossible Travel in Sentinel with KQLHere’s a sign-in pattern that should never happen. An account authenticates from Dublin at nine in the morning, then from São Paulo forty…
Victor Olawale·Nov 2Detecting Lateral Movement in Windows Environments: Using Microsoft Defender, Sysmon, and KQL to…Compromising one computer does not always mean an attacker has achieved their objective.
Vaasudev·Nov 1Building a Detection-as-Code Pipeline for Microsoft Sentinel (Part 3): Native Sentinel Repositories…In the first two parts of this series, I built a custom Detection-as-Code pipeline for Microsoft Sentinel.
CipherX9F Security·Nov 1How to ingest Windows Event Logs into Microsoft Sentinel with Azure Arc, AMA and XPath?Hands-on lab notes: a Windows 11 machine, onboarded with Azure Arc, sending Application, System, Setup and Security logs to Sentinel…
