Azure Monitor, Sentinel QuickStart Workbook templates

If you’ve followed me at all over the last few years, I make a lot of workbooks. I have a number of them on my github. I have these workbooks for your usage, completely free. LogicApps/Azure Sentinel Playbooks Azure Automation Update Management Azure File Sync Syslog Windows Event Log But now I’m putting out the …

Read moreAzure Monitor, Sentinel QuickStart Workbook templates

Azure Sentinel Syslog Workbook

I recently took a look at the Azure Sentinel Syslog Workbook, called Linux Machines. This workbook is not great, its essentially a dashboard. For me the power of Workbooks in both Azure Monitor and Azure Sentinel is hunting, whether you’re hunting threats or operational issues with your infrastructure or applications. Workbook Resources If this is …

Read moreAzure Sentinel Syslog Workbook

Overview of Azure Monitor, Security Center & Sentinel

In the past few months I’ve spoken with multiple Microsoft employees and even Microsoft MVPs that don’t understand Azure Sentinel, Azure Security Center, Azure Monitor and Log Analytics and whats the difference. There seems to be some confusion around these products and how they are used together.  I recently put together a diagram for a …

Read moreOverview of Azure Monitor, Security Center & Sentinel

Azure Monitor Event Log Workbook

Every Windows admin knows “check the logs” right? RIGHT? No one actually likes looking at each servers individual Event Log. At least I never did, even remotely its difficult, and switching context between log sources is a pain as well. Well Log Analytics can collect those event logs. And because Log Analytics can collect those …

Read moreAzure Monitor Event Log Workbook