Azure Sentinel Syslog Workbook

I recently took a look at the Azure Sentinel Syslog Workbook, called Linux Machines. This workbook is not great, its essentially a dashboard. For me the power of Workbooks in both Azure Monitor and Azure Sentinel is hunting, whether you’re hunting threats or operational issues with your infrastructure or applications. Workbook Resources If this is …

Read moreAzure Sentinel Syslog Workbook

Overview of Azure Monitor, Security Center & Sentinel

In the past few months I’ve spoken with multiple Microsoft employees and even Microsoft MVPs that don’t understand Azure Sentinel, Azure Security Center, Azure Monitor and Log Analytics and whats the difference. There seems to be some confusion around these products and how they are used together.  I recently put together a diagram for a …

Read moreOverview of Azure Monitor, Security Center & Sentinel