azure sentinel - Robuta Search

https://techcommunity.microsoft.com/discussions/microsoftsentinel/new-solutions-for-azure-sentinel/2711459 New solutions for Azure Sentinel | Microsoft Community Hub Hello all, I would like to contribute to Azure Sentinel solutions. Is there any particular solution that the developer community is looking for... new solutions azure sentinel microsoft community hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinels-function-help/3182213 Azure Sentinel's "Function" help | Microsoft Community Hub Hi, I want to make use of Function to set up exclusion rule, for example, src_ip=1.1.1.1 AND dest_ip=2.2.2.2, src_ip=3.3.3.3 AND signature=AAA. However,... azure sentinel microsoft community function help hub https://techcommunity.microsoft.com/discussions/microsoft-security/new-blog-post--azure-sentinel-notebooks-ninja-part-2-getting-started-with-azure-/2757808 New Blog Post | Azure Sentinel Notebooks Ninja Part 2: Getting Started with Azure Sentinel... Azure Sentinel Notebooks Ninja Part 2: Getting Started with Azure Sentinel Notebooks - Microsoft Tech Community This installment is part of a... new blog post azure sentinel https://techcommunity.microsoft.com/blog/mvp-blog/friday-five-introducing-azure-sentinel-azure-sentinel-connector-with-palo-alto-f/774600 Friday Five: Introducing Azure Sentinel, Azure Sentinel Connector with Palo Alto Firewalls, and... Jul 25, 2019 - Applying the Kubler-Ross Change Curve to Adopting Office365, Introducing Azure Sentinel, Azure Sentinel Connector with Palo Alto... palo alto firewalls friday five azure sentinel introducing https://techcommunity.microsoft.com/discussions/microsoftsentinel/how-to-export-incident-list-from-azure-sentinel/1198168 How to export Incident list from Azure Sentinel? | Microsoft Community Hub Hi Team, We have a requirement to export all incidents generated in Azure Sentinel and update customer with the incident which were false positives,... how to export azure sentinel microsoft community incident list https://techcommunity.microsoft.com/discussions/azure/azure-sentinel-updates/3574863/replies/3580366 Azure Sentinel Updates | Microsoft Community Hub Hello Folks !! I am back with a new blog , with a new update related to azure security related component - "Azure Sentinel". Here I will share the... azure sentinel microsoft community updates hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/new-survey--azure-sentinel-training-sessions--sign-up/2642529 New Survey | Azure Sentinel Training Sessions- SIGN UP! | Microsoft Community Hub Jupyter Notebooks is a powerful tool and an integral part of Azure Sentinel's toolkits. Many of customers have expressed interest in more trainings, so they... new survey azure sentinel training sessions sign up microsoft community https://techcommunity.microsoft.com/discussions/microsoft-security/new-survey--azure-sentinel-training-sessions--sign-up/2642515 New Survey | Azure Sentinel Training Sessions- SIGN UP! | Microsoft Community Hub Jupyter Notebooks is a powerful tool and an integral part of Azure Sentinel's toolkits. Many of customers have expressed interest in more trainings, so they... new survey azure sentinel training sessions sign up microsoft community https://techcommunity.microsoft.com/blog/microsoftsentinelblog/enriching-azure-sentinel-with-azure-ad-information/1288805 Enriching Azure Sentinel with Azure AD information | Microsoft Community Hub Nov 2, 2021 - Do you need to split your Azure Sentinel tables based on the department a user belongs to? Ensure an overseas compliance office has access only to Office 365... azure sentinel ad information microsoft community enriching hub https://techcommunity.microsoft.com/discussions/microsoft-security/azure-sentinel-new-blogs/1364992 Azure Sentinel new blogs! | Microsoft Community Hub Two new great blogs on Azure Sentinel: Tips for KQL Data Sampling as part of Azure Sentinel Investigations Azure Sentinel Tip for Table Details and... azure sentinel new blogs microsoft community hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-office-365-data-connectors/1252216 Azure Sentinel Office 365 Data Connectors | Microsoft Community Hub Hello Community!I have a problem with Office 365 Data Connector in Azure Sentinel.The source status is connected and I have a Security Administrator Role in... azure sentinel data connectors microsoft community office hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel/3248843 Azure Sentinel | Microsoft Community Hub Hi i am a beginner with azure sentinel.I want to know where are the diagnostics from Azure resources saved so that i can create a kql for any updation or... azure sentinel microsoft community hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/new-blog-post--introducing-azure-sentinel-data-exploration-toolset-asdet/2729377 New Blog Post | Introducing: Azure Sentinel Data Exploration Toolset (ASDET) | Microsoft Community... Introducing: Azure Sentinel Data Exploration Toolset (ASDET) - Microsoft Tech Community Security Analysts deal with extremely large... new blog post azure sentinel https://www.cloudflare.com/ko-kr/partners/technology-partners/microsoft/azure-sentinel/ Microsoft (Azure Sentinel) - Tech Partners | Cloudflare Learn more about how Cloudflare and Microsoft Azure Sentinel can help customers make the most of their security data. microsoft azure tech partners sentinel cloudflare https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-fusion/1253456 Azure Sentinel Fusion | Microsoft Community Hub Hello everyone. I've been trying trying to get Advanced multistage detection to work.As far as I'm aware, requirements for it are the Azure identity... azure sentinel microsoft community fusion hub https://techcommunity.microsoft.com/blog/microsoftsentinelblog/kicking-off-the-azure-sentinel-hackathon/1364436/replies/1380920 Kicking off the Azure Sentinel Hackathon! | Microsoft Community Hub Nov 2, 2021 - Join in the very first online Hackathon for Azure Sentinel for the opportunity to deliver ultimate cybersecurity value! kicking off azure sentinel microsoft community hackathon hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/error-while-running-powershell-script-in-azure-sentinel/2754066 Error while running powershell script in azure sentinel | Microsoft Community Hub I am trying to run powershell script to add playbooks in Azure... powershell script azure sentinel microsoft community error running https://www.bitdefender.com/business/support/en/77212-204099-integrate-gravityzone-cloud-with-azure-sentinel.html Integrate GravityZone On-premises with Azure Sentinel with Azure Sentinel (deprecated) on premises azure sentinel integrate deprecated https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-common-event-format-cef-connectors-update--preview/800857 Azure Sentinel: Common Event Format (CEF) Connectors Update | PREVIEW | Microsoft Community Hub Azure Sentinel allows you to connect any on-premises appliance that supports Common Event Format over Syslog to Azure Sentinel. Sentinel team has been... azure sentinel event format https://techcommunity.microsoft.com/blog/microsoftsentinelblog/ingest-office-365-dlp-events-into-azure-sentinel/1031820/replies/1501827 Ingest Office 365 DLP Events into Azure Sentinel | Microsoft Community Hub Nov 2, 2021 - Learn how to use Office 365 DLP events in Azure Sentinel. azure sentinel microsoft community ingest office dlp https://techcommunity.microsoft.com/discussions/microsoftsentinel/install-log-analytics-for-azure-sentinel-alongside-scom/1458223 Install Log Analytics for Azure Sentinel alongside SCOM | Microsoft Community Hub Hi, We would like to install a log analytics agent for Azure Sentinel on a host on which an SCOM agent is already running. What is the best way to... log analytics azure sentinel microsoft community install https://techcommunity.microsoft.com/blog/microsoftsentinelblog/categorizing-microsoft-alerts-across-data-sources-in-azure-sentinel/1503367 Categorizing Microsoft alerts across data sources in Azure Sentinel | Microsoft Community Hub Nov 2, 2021 - A quick guide to major Microsoft data sources that can be easily ingested into Sentinel to help see value quickly. data sources azure sentinel microsoft alerts across https://www.pearson.com/en-nz/subject-catalog/p/microsoft-azure-sentinel-planning-and-implementing-microsoft-s-cloud-native-siem-solution/P200000007266/9780137900961 Microsoft Azure Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution microsoft azure cloud native sentinel planning https://learn.microsoft.com/nl-nl/rest/api/securityinsights/product-settings/list?view=rest-securityinsights-2025-07-01-preview Product Settings - List - REST API (Azure Sentinel) | Microsoft Learn Meer informatie over de Sentinel-service - Lijst met alle instellingen product settings rest api azure sentinel list microsoft https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-roadmap-survey--customizable-overview-page/1873439 Azure Sentinel Roadmap Survey | Customizable Overview Page | Microsoft Community Hub Let us know what you want to see! Azure Sentinel is looking into giving our users the option to customize their own overview page; potentially starting... azure sentinel overview page microsoft community roadmap survey https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-pricing/1451713 Azure Sentinel Pricing | Microsoft Community Hub I love the tool. Pricing is confusing to me. I would rather use it then what my current MSSP uses (AlienVault), but the pricing makes it so we could... azure sentinel microsoft community pricing hub https://techcommunity.microsoft.com/blog/microsoftsentinelblog/approximate-partial-and-combined-lookups-in-azure-sentinel/1393795 Approximate, partial and combined lookups in Azure Sentinel | Microsoft Community Hub Jul 6, 2020 - Every SIEM can perform exact lookups. However, for partial, approximate, and multi-condition lookups, you need to revert to complex rule logic. Azure... azure sentinel microsoft community approximate partial combined https://techcommunity.microsoft.com/discussions/microsoftsentinel/permissions-required-for-editing-azure-sentinel-workbooks/2821227 Permissions required for Editing Azure Sentinel Workbooks | Microsoft Community Hub Hello I have currently "Contributor" privileges on an azure tenant that is accessed through Azure Light house. However, i cannot edit the workbooks,... azure sentinel microsoft community permissions required editing https://techcommunity.microsoft.com/discussions/microsoftsentinel/365-defender-integration-with-azure-sentinel-not-working/2250745/replies/2251536 365 Defender integration with Azure Sentinel not working | Microsoft Community Hub Hello folks, I have enabled the connector of 'Defender for Office 365' for my sentinel but it's more than 15 days and it has not ingested any data at... azure sentinel not working microsoft community defender integration https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel--new-blog-on-riskiq-intelligence-connector/1544129 Azure Sentinel | New blog on RiskIQ Intelligence Connector | Microsoft Community Hub In the latest Azure Sentinel's blog you will learn how to obtain, configure, and associate the RiskIQ Intelligence Connector playbooks... azure sentinel new blog microsoft community https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/closing-an-incident-in-azure-sentinel-and-dismissing-an-alert-in-azure-security-/1180208 Closing an Incident in Azure Sentinel and Dismissing an Alert in Azure Security Center | Microsoft... Feb 19, 2020 - As we are exploring automation scenarios within Azure Security , we come across an unsolved mystery. When I use Azure Security Center connector into Azure... azure sentinel https://techcommunity.microsoft.com/discussions/microsoftsentinel/google-cloud-platform-integration-into-azure-sentinel/718979 Google CLoud Platform integration into Azure Sentinel | Microsoft Community Hub I note that there is AWS integration but is there plans or integration pattern for GCP? google cloud platform azure sentinel microsoft community integration hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/querying-azure-sentinel-logs-using-kql/982750 Querying Azure Sentinel Logs Using KQL | Microsoft Community Hub Hello, We have integrated MCAS with Azure Sentinel using the data connector available. All the logs are being sent to Sentinel and so far it is good. To... azure sentinel microsoft community querying logs using https://techcommunity.microsoft.com/discussions/microsoftsentinel/unable-to-install-azure-sentinel-training-lab-solution/3016957 Unable to install Azure Sentinel Training Lab Solution | Microsoft Community Hub Hi there, I am planning to install Azure Sentinel Training Lab Solution in my environment so I can use it to demo to the clients, however it is... azure sentinel training lab microsoft community unable install https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-analytic-rules---data-types-for-powershell/2360911 Azure Sentinel Analytic Rules - data types for Powershell | Microsoft Community Hub Hi all I want to collect all of my 'connected' Data Types found in Data Connectors into a $variable for PowerShell to then create analytics rules for... azure sentinel data types microsoft community analytic rules https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-logic-app-write-back-to-comment/854900/replies/877351 Azure Sentinel Logic App write back to comment | Microsoft Community Hub Hi All, I am trying to write the output of a HTTP GET (Which works) to a comment in Sentinel, from my review it appears as if the ID's and Groups... azure sentinel logic app write back microsoft community https://techcommunity.microsoft.com/discussions/microsoftsentinel/blog--bring-your-threat-intelligence-to-azure-sentinel/1168087 Blog | Bring your threat intelligence to Azure Sentinel | Microsoft Community Hub Our Azure Sentinel team just released a great blog on threat intelligence. Click here for details. threat intelligence azure sentinel microsoft community blog bring https://techcommunity.microsoft.com/discussions/microsoftsentinel/connecting-dns-analytics---azure-sentinel/894427 Connecting DNS Analytics - Azure Sentinel | Microsoft Community Hub We have connected DNS logs from our DCs to Sentinel and are receiving DNS events. However the requested domain names and any of the analytical data is not... dns analytics azure sentinel microsoft community connecting hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-sap-solution/2396783 Azure Sentinel SAP Solution | Microsoft Community Hub In working with multiple customer SAP environments. Based on the docs, an SAP connector is required for each environment. But how would it work on the... azure sentinel sap solution microsoft community hub https://techcommunity.microsoft.com/discussions/microsoft-security/azure-sentinel-community-survey/1131544 Azure Sentinel Community Survey | Microsoft Community Hub Are you interested in Azure Sentinel? We'd love to get your feedback on this survey about how our community can best serve... azure sentinel community survey microsoft hub https://learn.microsoft.com/en-us/rest/api/securityinsights/source-control?view=rest-securityinsights-2025-09-01 Source Control - REST API (Azure Sentinel) | Microsoft Learn Learn more about [Sentinel Source Control Operations]. How to [list Repositories]. source control rest api azure sentinel microsoft learn https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-with-lighthouse/1157468 Azure Sentinel with Lighthouse | Microsoft Community Hub We have deployed Azure Lighthouse to manage Azure Sentinel with Azure Sentinel Contributor and Azure Logic App Contributor roles. we can access... azure sentinel microsoft community lighthouse hub https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-linux-syslog-agent-configuration/1845556/replies/2897042 Azure Sentinel Linux Syslog Agent Configuration | Microsoft Community Hub Hello All, I looking for help with trying to ingest Cisco NGFWv syslog messages in Azure Sentinel. I've configured my Linux Syslog agent to... azure sentinel agent configuration microsoft community linux syslog https://techcommunity.microsoft.com/discussions/microsoftsentinel/adopting-sentinel-into-an-existing-azure-cloud-environment/1548390 Adopting Sentinel into an existing Azure Cloud environment | Microsoft Community Hub I'm reasonably new to Azure as a whole, and I've been really enjoying playing with Sentinel so far, but the time has come to deploy it in a more formal... azure cloud microsoft community adopting sentinel existing https://learn.microsoft.com/en-us/azure/sentinel/incident-investigation Microsoft Sentinel incident investigation in the Azure portal | Microsoft Learn This article describes Microsoft Sentinel's incident investigation and case management capabilities and features in the Azure portal. microsoft sentinel incident investigation azure portal learn https://azure.microsoft.com/en-us/pricing/offers/sentinel-microsoft-365-offer Microsoft 365 E5 benefit offer with Microsoft Sentinel | Microsoft Azure Azure Sentinel benefit for Microsoft 365 E5 customers microsoft benefit offer sentinel azure https://learn.microsoft.com/en-gb/azure/sentinel/forward-syslog-monitor-agent Tutorial: Forward Syslog data to Microsoft Sentinel and Azure Monitor by using Azure Monitor Agent... In this tutorial, you learn how to monitor Linux-based devices by forwarding Syslog data to a Log Analytics workspace. https://techcommunity.microsoft.com/blog/itopstalkblog/microsoft-365-threat-hunting-with-azure-sentinel/2210320 Hunting for security threats in Microsoft 365 with Azure Sentinel Mar 15, 2021 - How to use Azure Sentinel for threat hunting across Microsoft 365 activities. for security hunting threats microsoft azure https://techcommunity.microsoft.com/discussions/microsoft-security/new-blog-post--becoming-an-azure-sentinel-notebooks-ninja---the-series/2699545 New Blog Post | Becoming an Azure Sentinel Notebooks ninja - the series! | Microsoft Community Hub Azure Sentinel notebook ninja - the series! (microsoft.com) Welcome to a new series on Azure Sentinel Notebooks! In this post, we want to introduce... new blog post https://techcommunity.microsoft.com/discussions/microsoft-security/new-blog-post--check-the-health-of-your-exported-azure-sentinel-logs-in-your-adx/2729587 New Blog Post | Check the health of your exported Azure Sentinel logs in your ADX cluster |... Checking the health of your ADX cluster for long-term retention logs (microsoft.com) More and more Azure Sentinel customers are opting for long-term... https://devblogs.microsoft.com/azuregov/monitoring-cloud-security-for-zero-trust-with-azure-sentinel-3-of-6/ Monitoring Cloud Security for Zero Trust with Azure Sentinel (3 of 6) - Azure Government Feb 25, 2020 - This is the third in a six-part blog series where we will demonstrate the application of Zero Trust concepts for securing federal information systems with... https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-sentinel-and-azure-defender-for-cloud-share-the-same-workspaces/3248430 Azure Sentinel and Azure Defender for cloud share the same workspaces | Microsoft Community Hub Azure sentinel and Azure defender sharing the same workspace, this is a good practice or a bad practice. In the training I did, everything was separate, but... defender for cloud https://ammblog.azurewebsites.net/2019/04/16/machine-learning-powered-detections-with-kusto-query-language-in-azure-sentinel/ Machine Learning powered detections with Kusto query language in Azure Sentinel | Mashford's Musings Apr 16, 2019 - This post is co-authored by Tim Burrell, Principal Security Engineering Manager and Dotan Patrich, Principal Software Engineer. As cyberattacks become https://techcommunity.microsoft.com/blog/microsoftsentinelblog/graph-visualization-of-external-teams-collaborations-in-azure-sentinel/1356847/replies/2105173 Graph Visualization of External Teams Collaborations in Azure Sentinel | Microsoft Community Hub Nov 2, 2021 - Utilizing graph visualizations and cluster analysis to identify outliers that diverge from typical enterprise collaboration behavior. graph visualization https://techcommunity.microsoft.com/discussions/microsoftsentinel/is-there-cost-for-azure-function-connecting-to-gcp-to-pull-logs-to-sentinel/3177299/replies/3198212 Is there cost for Azure function connecting to GCP to pull logs to sentinel? | Microsoft Community... Hi, We have a scenario where we are planning to connect Google Cloud to Azure Sentinel using pull methodology (Azure Function). The question is, is... https://techcommunity.microsoft.com/blog/microsoftsentinelblog/graph-visualization-of-external-teams-collaborations-in-azure-sentinel/1356847/replies/2042832 Graph Visualization of External Teams Collaborations in Azure Sentinel | Microsoft Community Hub Nov 2, 2021 - Utilizing graph visualizations and cluster analysis to identify outliers that diverge from typical enterprise collaboration behavior. graph visualization https://techcommunity.microsoft.com/discussions/microsoftsentinel/disabling-the-azure-activity-sentinel-connector/3301150 Disabling the Azure Activity Sentinel connector | Microsoft Community Hub Hi all,I have an issue with the amount of logs the Azure Activity connector is ingesting into sentinel, and I'd like to disable it so that i could review... microsoft community disabling azure activity sentinel https://techcommunity.microsoft.com/discussions/microsoftsentinel/using-azure-sentinel-to-enable-insights-for-legacymodern-auth-usage/584024 Using Azure Sentinel to enable Insights for Legacy/Modern Auth usage | Microsoft Community Hub One element that I have noticed in the last month is Insights under the Monitoring and have been using this to check how many sign-ins are coming in thru... https://techcommunity.microsoft.com/discussions/microsoftsentinel/new-blog-post--using-automated-notebooks-and-azure-sentinel-to-improve-sec-ops/2592311 New Blog Post | Using Automated Notebooks and Azure Sentinel to Improve Sec Ops | Microsoft... Software Defined Monitoring - Using Automated Notebooks and Azure Sentinel to Improve Sec Ops - Microsoft Tech Community Incident triage is a core component... new blog post https://azure.microsoft.com/en-us/blog/reducing-security-alert-fatigue-using-machine-learning-in-azure-sentinel/ Reducing security alert fatigue using machine learning in Azure Sentinel | Microsoft Azure Blog Jun 18, 2025 - Last week we launched Azure Sentinel, a cloud native SIEM tool. Machine learning (ML) in Azure Sentinel is built-in right from the beginning. We have... security alert machine learning https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-security-analytics-sentinel?WT.mc_id=modinfra-23481-socuff Configure security analytics for Azure Active Directory B2C data with Microsoft Sentinel - Azure AD... Use Microsoft Sentinel to perform security analytics for Azure Active Directory B2C data. azure active directory https://techcommunity.microsoft.com/discussions/microsoftsentinel/azure-devops-service-as-actordisplayname-in-sentinel-logs/4076928 Azure DevOps Service as ActorDisplayName in Sentinel Logs | Microsoft Community Hub Hello there,While creating alerts for group membership update using AzureDevOpsAuditing table in Sentinel, we observed logs for user addition/removal from... azure devops service microsoft community https://azure.microsoft.com/en-us/blog/securing-the-hybrid-cloud-with-azure-security-center-and-azure-sentinel/ Securing the hybrid cloud with Azure Security Center and Azure Sentinel | Microsoft Azure Blog Jun 24, 2025 - Infrastructure security is top of mind for organizations managing workloads on-premises, in the cloud, or hybrid. Keeping on top of an ever-changing security... azure security center the hybrid https://ammblog.azurewebsites.net/2023/03/02/azure-waf-guided-investigation-notebook-using-microsoft-sentinel-for-automated-false-positive-tuning/ Azure WAF guided investigation Notebook using Microsoft Sentinel for automated false positive... Mar 2, 2023 - With special thanks to Pete Bryan, Principal Security Research Manager, Microsoft Security. The SQL injection attack remains one of the azure waf https://www.globalservices.bt.com/it/aboutus/news-press/bt-launches-a-new-range-of-managed-security-and-advisory-services-for-Microsoft-Azure-Sentinel BT lancia una nuova gamma di servizi gestiti di sicurezza e consulenza per Microsoft Azure Sentinel... BT ha annunciato oggi una nuova gamma di servizi di consulenza e sicurezza completamente gestiti per supportare Microsoft Azure Sentinel. https://techcommunity.microsoft.com/discussions/microsoft-security/new-blog-post--testing-new-version-of-windows-security-events-connector-with-azu/2494389 New Blog Post | Testing New Version of Windows Security Events Connector with Azure Sentinel To-Go!... Testing the New Version of the Windows Security Events Connector with Azure Sentinel To-Go! - Microsoft Tech Community Last week, on Monday June... https://techcommunity.microsoft.com/discussions/microsoftsentinel/sentinel-data-connector-for-azure-virtual-desktop/4370098 Sentinel Data Connector for Azure Virtual Desktop | Microsoft Community Hub Hello, I have a customer planning to deploy Azure Virtual Desktop (AVD). They are currently using Microsoft Sentinel for their SecOps. However, there is no... azure virtual desktop data connector microsoft community sentinel hub