Azure Sentinel Syslog Workbook

I recently took a look at the Azure Sentinel Syslog Workbook, called Linux Machines. This workbook is not great, its essentially a dashboard. For me the power of Workbooks in both Azure Monitor and Azure Sentinel is hunting, whether you’re hunting threats or operational issues with your infrastructure or applications. Workbook Resources If this is …

Read more

Overview of Azure Monitor, Security Center & Sentinel

In the past few months I’ve spoken with multiple Microsoft employees and even Microsoft MVPs that don’t understand Azure Sentinel, Azure Security Center, Azure Monitor and Log Analytics and whats the difference. There seems to be some confusion around these products and how they are used together.  I recently put together a diagram for a …

Read more

LogicApps Azure Monitor Workbook

Something I’ve been working on off and on was a LogicApps workbook for Azure Monitor. The view designer dashboard, was always in preview and kind of bad. Donnie’s recent post in our series inspired me to finish it. Especially since we’ve gotten confirmation that the view designer is going to be phased out. This workbook …

Read more

Azure Monitor Event Log Workbook

Every Windows admin knows “check the logs” right? RIGHT? No one actually likes looking at each servers individual Event Log. At least I never did, even remotely its difficult, and switching context between log sources is a pain as well. Well Log Analytics can collect those event logs. And because Log Analytics can collect those …

Read more

Setup Azure Function Hybrid Connection

In this latest post in Donnie and I’s Migrating from Orchestrator series, I’ll show you how to setup Hybrid Connection for PowerShell Azure Functions. This will allow you to perform automation tasks on-prem with Function Apps using PowerShell Core. Requirements App Service Plan Azure Function in my case I’m using PowerShell Core You’ll need a …

Read more