Category: Azure Sentinel

Monitor KRBTGT with Azure Sentinel

How do you handle the KRBTGT object? And when was the last time you changed KRBTGT password? or which AD attacks can be performed by using KRBTGT. The post-Monitor KRBTGT with Azure Sentinel describes why and how to monitor KRBTGT.… Read the rest

Azure Sentinel Tables and Structure

The following post Azure Sentinel Tables and Structure, describe the table and structure in Azure Sentinel. Azure Sentinel Data is based on Azure Log Analytics, and this is similar to Azure Monitor itself.

Data in Azure Sentinel Logs are stored … Read the rest

Deploy and Configure Azure Sentinel

The following post is part of a series of articles that will focus on the many capabilities and options of Azure Sentinel, from the beginning with deployment, through configure connectors to the setting and using Notebook and Azure Lighthouse and … Read the rest

Tracking Patient Zero with Azure Sentinel

Information security has many similar concepts with medical, after all, the terms of patient zero, virus, health risk, infections, and many others are used in both areas.

Today, attacks against organizations are becoming more and more accurate and are developed Read the rest