How to Use Microsoft 365 Defender and Sentinel to Defend Against Zero Day Threats: Part I
This article discusses the four main steps to mitigate a zero-day threat Using Microsoft 365 Defender and Sentinel.
November 2, 2022
Latest Articles
Using KQL to Master Sentinel Data
Kusto Query Language, or KQL for short, is omnipresent in the Microsoft world and is used in different product stacks. Like any language, KQL can be challenging to understand and know where to start. This article is intended to help newcomers to get started.
October 27, 2022
Choosing an Appropriate Retention Period for Microsoft Sentinel Workspaces
When you deploy Microsoft Sentinel, one of the most important design decisions is determining the appropriate data retention period.
September 13, 2022
How to Use Office 365 Audit Data with Microsoft Sentinel
Microsoft Sentinel is Microsoft's log aggregator. Along with other data, Sentinel can ingest events from the Office 365 audit log. Once ingested, we can visualize the data through workbooks. If you have an Azure subscription, it's surprisingly easy to take advantage of the 31-day trial to see if Sentinel can do a job for your organization. Follow our steps and you'll be visualizing quickly.
January 13, 2022
Mitigating Risk Created by On-Premises Infrastructures in Microsoft 365
Continuing our review of practices to protect cloud infrastructures from weaknesses that can be introduced from on-premises accounts, we consider admin rights, authentication, and conditional access policies. Plus the need to collect and analyze the log data available in cloud environments to make sure that nothing nasty is slipping through.
November 23, 2021