Another #Ninja series ๐
โBecome a Microsoft Unified SOC Platform Ninja ๐ฅทโ๏ธโ Donโt miss it :)
#XDR #SIEM #MicrosoftDefenderXDR #MicrosoftSentinel
techcommunity.microsoft.com/t5/microsoft-sโฆ
The next installment in the Automate your SOC series.
#microsoft #microsoft sentinel #siem #cybersecurity lnkd.in/d5-9aXcq
'Differentiate Microsoft Defender for Cloud and Microsoft Sentinel' TekkiGurus Tim Warner (@TechTrainerTim) tekkigurus.com/differentiate-โฆ #MicrosoftDefenderforCloud #MDC #MicrosoftSentinel #AzureDefender #AzureSecurityCenter #MicrosoftDefender365 #CloudAppSecurity #LogAnalytics #Kusto
Hiring for Cyber Next platform () in the areas of SIEM, SOAR, Threat Intel, Cloud Security, API Security, etc
lnkd.in/gW7XypXY
#qradar #microsoftsentinel #paloalto #cyberforte #Infosyscybersecurity #cyberintelligence #cybersecurity #fortifycyber lnkd.in/gVqwCJYB
[๐๐๐ถ๐ฑ๐ฒ] ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐ฆ๐ฒ๐ป๐๐ถ๐ป๐ฒ๐น ๐๐ผ๐ฟ๐ธ๐๐ฝ๐ฎ๐ฐ๐ฒ ๐ฎ๐ฟ๐ฐ๐ต๐ถ๐๐ฒ๐ฐ๐๐๐ฟ๐ฒ ๐ฏ๐ฒ๐๐ ๐ฝ๐ฟ๐ฎ๐ฐ๐๐ถ๐ฐ๐ฒ๐
learn.microsoft.com/en-us/azure/seโฆ
#MicrosoftSentinel #BestPractices
Recording with Stefan Schรถrling Harjit Dhaliwal Mattias Borg and Frans Oudendorp โ | MVP on the #cybersecurity topic. #Microsoft365Defender #XDR #MicrosoftSentinel at WorkPlaceNinjaSummit
I am writing XDR blog that focuses on recent updates and major features in XDR. Then, I summarize a one-pager on how Microsoft Security is rapidly evolving and shifting to Unified XDR and SIEM.
#XDR #SIEM #MicrosoftSecurity #MicrosoftDefenderXDR #MicrosoftSentinel
KQL query for troubleshooting #MicrosoftSentinel TAXII Connector issues github.com/alexverboon/Huโฆ #kql #mvpbuzz #Taxii #ThreatIntelligenceFeeds
#microsoftsentinel #kusto #cybersecurity #socanalyst #Azure #threathunting #cyberdefense #siem #threatdetection I wrote #kql queries for #hunting #0mega #ransomware that is infecting #sharepoint sites
Ref: obsidiansecurity.com/blog/saas-ransโฆ
Queries: github.com/le0li9ht/Microโฆ
Monitoring Windows built-in local security Groups with Microsoft Defender XDR or Sentinel verboon.info/2024/02/monitoโฆ #kql #mvpvuzz #MicrosoftSentinel #DefenderXDR
Detecting AD CS #subjectAltName (SAN) Abuse Using #KQL & #MicrosoftSentinel
Problems tackled:
1๏ธโฃ #ADCS logging is poor...
2๏ธโฃ How do we map events that have no correlating fields?
3๏ธโฃ Can logical thinking be expressed through KQL?
in.security/2023/03/02/detโฆ
Microsoft Sentinel introduced a significant number of new features and improvements of existing ones since our last diagram update. This one page diagram attempts to cover the core components and the integration with log sources.
managedsentinel.com/microsoft-sentโฆ
#microsoftsentinel #siem
Intune local admin and investigation with MDE and #MicrosoftSentinel .
misconfig.io/intune-devicesโฆ
๐๐ค Enhancing Security and Efficiency with Microsoft Sentinel and Teams Integration ๐๐ผ
Are you looking to boost your organization's security while streamlining communication and response processes? Look no further! Integrating #MicrosoftSentinel with #MicrosoftTeams offers a
I launched a new project that maps Microsoft Sentinel analytic rules and incidents to the MITRE ATT&CK Navigator, providing more flexibility than the current MITRE blade in Sentinel.
๐Github: github.com/HybridBrothersโฆ
#MicrosoftSentinel #mitre #HybridBrothers
[๐๐๐ถ๐ฑ๐ฒ] ๐ ๐ฃ๐ผ๐๐ฒ๐ฟ๐ณ๐๐น ๐๐ผ๐ป๐ฑ๐ถ๐๐ถ๐ผ๐ป๐ฎ๐น ๐๐ฐ๐ฐ๐ฒ๐๐ ๐๐ต๐ฎ๐ป๐ด๐ฒ ๐๐ฎ๐๐ต๐ฏ๐ผ๐ฎ๐ฟ๐ฑ ๐ณ๐ผ๐ฟ ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐ฆ๐ฒ๐ป๐๐ถ๐ป๐ฒ๐น
This project is some days old but still highly valuable
buff.ly/49WEAMa
#ConditionalAccess #MicrosoftSentinel
Updated the #KQL repository with some #DefenderforIoT queries
github.com/alexverboon/Huโฆ
#DefenderXDR #MicrosoftSentinel