Azure Monitor, Sentinel QuickStart Workbook templates

If you’ve followed me at all over the last few years, I make a lot of workbooks. I have a number of them on my github. I have these workbooks for your usage, completely free. LogicApps/Azure Sentinel Playbooks Azure Automation Update Management Azure File Sync Syslog Windows Event Log But now I’m putting out the …

Read moreAzure Monitor, Sentinel QuickStart Workbook templates

Azure Sentinel Syslog Workbook

I recently took a look at the Azure Sentinel Syslog Workbook, called Linux Machines. This workbook is not great, its essentially a dashboard. For me the power of Workbooks in both Azure Monitor and Azure Sentinel is hunting, whether you’re hunting threats or operational issues with your infrastructure or applications. Workbook Resources If this is …

Read moreAzure Sentinel Syslog Workbook

Overview of Azure Monitor, Security Center & Sentinel

In the past few months I’ve spoken with multiple Microsoft employees and even Microsoft MVPs that don’t understand Azure Sentinel, Azure Security Center, Azure Monitor and Log Analytics and whats the difference. There seems to be some confusion around these products and how they are used together.  I recently put together a diagram for a …

Read moreOverview of Azure Monitor, Security Center & Sentinel