Skip to main content
Microsoft
Industry
Industry
  • Home
    • Automotive
    • Consumer goods
    • Energy
    • Financial Services
      • Overview
      • Banking
      • Capital markets
      • Insurance
    • Government
      • Overview
      • Critical infrastructure
      • Public finance
      • Public health & social services
      • Public safety & justice
      • Defense & Intelligence
    • Healthcare
      • Overview
      • Payors
      • Life Sciences
    • Manufacturing
    • Media & Entertainment
    • Microsoft Cloud for Sovereignty
    • Microsoft Customer Experience Platform
    • Nonprofit
    • Retail
    • Sustainability
    • Telecommunications
    • Azure
    • Dynamics 365
    • Github
    • HoloLens 2
    • Microsoft 365
    • Microsoft Power Platform
    • Microsoft Security
    • Microsoft Teams
    • Blogs
    • Find a partner
    • Learn more
    • Education
    • Microsoft + Nuance
    • Contact Support
    • Technical documentation
    • Global

      • Microsoft Security
      • Azure
      • Dynamics 365
      • Microsoft 365
      • Microsoft Teams
      • Windows 365
    • Tech & innovation
      • Microsoft Cloud
      • AI
      • Azure Space
      • Mixed reality
      • Microsoft HoloLens
      • Microsoft Viva
      • Quantum computing
      • Sustainability
    • Industries
      • Education
      • Automotive
      • Financial services
      • Government
      • Healthcare
      • Manufacturing
      • Retail
      • All industries
    • Partners
      • Find a partner
      • Become a partner
      • Partner Network
      • Find an advertising partner
      • Become an advertising partner
      • Azure Marketplace
      • AppSource
    • Resources
      • Blog
      • Microsoft Advertising
      • Developer Center
      • Documentation
      • Events
      • Licensing
      • Microsoft Learn
      • Microsoft Research
    • View Sitemap

Tag: Azure Sentinel

Explore:
  • Be your future
  • Education
  • Financial services
  • Government
  • Health
  • Manufacturing
  • Retail
  • TechNet UK
  1. Blog home
  2. Tag: Azure Sentinel

Current Selections

  • Sort by: Newest to oldest
  • Published Date: All dates
  • Tag: Azure Sentinel
Clear selections

Refine results

Sort by
Category
Published Date
  • A CISO discusses cybersecurity with her colleague in an office with multiple screens
    • Cross-industry
    Published 28/03/2023

    What is a ‘security culture’? Best practices for implementing your security strategy 

    Over 100 million attacks against remote management devices were observed in May 2022. Today, a Zero Trust security approach is crucial in a world of remote work.
  • Hybrid Cloud logo
    • Cross-industry
    Published 15/07/2020

    Azure Workbook: This will show Public IP Address that you have 

    This Azure Monitor Workbook can help identify by using KQL (Kusto Query Language) data from AzureActivity and Azure Resource Graph (ARG) which IP addresses are configured and when. Tip you can also use the queries to form an Alert in Azure Monitor or Azure Sentinel to detect when a IP address is made public. Demo:
  • Hybrid Cloud logo
    • Cross-industry
    Published 02/07/2020

    Log Analytics: Queries, how to find and run them in a Workbook – part 2 

    I hadn’t intended a Part 2 on this topic, but I also managed to add Tabs into the “FindMySyntax” Workbook for Azure Monitor Workbooks and Azure Resource Graph. Please see part1: https://www.microsoft.com/en-gb/industry/blog/cross-industry/2020/06/18/log-analytics-kql-saved-queries-how-to-find-and-run-them-in-a-workbook/ For future versions please look here: https://github.com/CliveW-MSFT/KQLpublic/tree/master/KQL/Workbooks/findMySynatx Summary So why do I have a Azure Monitor Workbook to find Workbooks, two main reasons:
  • Hybrid Cloud logo
    • Cross-industry
    Published 18/06/2020

    Log Analytics Workspace Retention Reporting Options (Part 2) 

    In my previous post I talked about using Postman to make a REST API call to a Log Analytics workspace to view and change the retention settings. Equally I mentioned that I would look to utilise an Azure Monitor workbook to visualise the settings. Azure Monitor workbooks are a fantastic way to visualise data within
  • Hybrid Cloud logo
    • Cross-industry
    Published 18/06/2020

    Log Analytics: KQL saved Queries, how to find and run them in a Workbook 

    Summary Log Analytics has a option called Query Explorer (note, this is due to be updated, so this example is applicable for a short period of time).  If like me you have 100’s of saved queries, managing them can be a challenge (my #1 challenge!), lets fix that with a Azure Monitor Workbook… One of
  • Hybrid Cloud logo
    • Cross-industry
    Published 17/06/2020

    Log Analytics Workspace Retention Reporting Options (Part 1) 

    Hi all, This is the first of two posts that I will be doing on how you can report on the Retention settings of an Azure Log Analytics workspace. In the second post I will provide a sample Workbook for displaying the settings. It is often that during my conversations with customers about Azure Monitor,
  • Hybrid Cloud logo
    • Cross-industry
    Published 17/06/2020

    Log Analytics or Azure Sentinel – how schedule a report 

    In this post I show how you can schedule a report to run, using a Log Analytics query, its a frequent ask and one I have answered a few times in posts like this: https://techcommunity.microsoft.com/t5/azure-log-analytics/log-analytics-for-report-generation/m-p/1469610 Question: Can I schedule a query to run in Azure Monitor Logs / Log Analytics (or even for Azure Sentinel)
  • Hybrid Cloud logo
    • Cross-industry
    Published 04/06/2020

    Audit at scale. Workspaces and Azure Security Center 

    A few times this week I’ve had two discussions. How is my Azure Security Center (ASC) licenced and configured? And how many workspaces do I have, and what retention policy is set.   You can look in the portal, however to do this at scale, lets use Azure Resource graph:   I suggest you use
  • Hybrid Cloud logo
    • Cross-industry
    Published 11/05/2020

    Log Analytics: Improved rendering of Charts 

    Hi all,   I just found out today that the Render operator now supports more features in Log Analytics.   Event | summarize dcount(EventID) by Computer , bin(TimeGenerated, 1h) | render timechart with (legend = hidden, title = “My Title here”, xtitle = “X title”, ytitle = “Y title”, ymin = 3, ymax = 10)
  • Hybrid Cloud logo
    • Cross-industry
    Published 27/04/2020

    Azure Sentinel: Adding the query data to an Alert in a Playbook 

    Azure Sentinel Playbooks (based on Logic Apps) are commonly used to take Alert data and perform a Security Orchestration, Automation and Response (SOAR) capability For this issue (I was asked about it twice today so decided to post the answer).  You can use the “Run query and visualise results” to take the Query from the
  • Hybrid Cloud logo
    • Cross-industry
    Published 18/03/2020

    Azure Sentinel: CIDR matching 

    KQL has some IPV4 features.  A new one last month is IPV4_is_match : https://docs.microsoft.com/en-us/azure/kusto/query/ipv4-is-matchfunction Two examples (more here https://github.com/CliveW-MSFT/KQLpublic/blob/master/Queries/CIDRexamples ): 1.Using the SigninLogs Table as data. This example takes an IP Address from the log and sees if it is in an allowed range or not.  You define whats allowed or not in the CASE
  • Hybrid Cloud logo
    • Cross-industry
    Published 16/03/2020

    Azure Monitor Workbooks: How to find Virtual Machines that are in, and not in Azure! 

    Sorry I’ve been away for while, however I’m back with a few articles on Azure Monitor Workbooks.  Thanks to Alp Babayigit for the idea and use case for this Workbook. I first started with Workbooks when Azure Sentinel was launched and published some articles here: https://techcommunity.microsoft.com/t5/azure-sentinel/azure-sentinel-and-azure-arc/ba-p/999379 https://techcommunity.microsoft.com/t5/azure-sentinel/how-to-use-azure-sentinel-to-follow-a-users-travel-and-map-their/ba-p/981716 https://techcommunity.microsoft.com/t5/azure-sentinel/how-to-use-azure-monitor-workbooks-to-map-sentinel-data/ba-p/971818   Summary In this new Workbook, I
  • Previous
  • 1
  • 2
  • Next

Explore Microsoft industry solutions

Transcend boundaries with tailored industry solutions. Accelerate time to value, speed up innovation, and drive benefits for your customers, employees, and organization.

Learn more
Industry global cta component
What's new
  • Surface Laptop Studio 2
  • Surface Laptop Go 3
  • Surface Pro 9
  • Surface Laptop 5
  • Surface Studio 2+
  • Surface Laptop Studio
  • Microsoft 365
  • Windows 11 apps
Microsoft Store
  • Account profile
  • Download Center
  • Microsoft Store Support
  • Returns
  • Order tracking
  • Microsoft Experience Centre
  • Recycling
  • Microsoft Store Promise
Education
  • Microsoft in education
  • Devices for education
  • Microsoft Teams for Education
  • Microsoft 365 Education
  • Office Education
  • Educator training and development
  • Deals for students and parents
  • Azure for students
Business
  • Microsoft Cloud
  • Microsoft Security
  • Azure
  • Dynamics 365
  • Microsoft 365
  • Microsoft Industry
  • Microsoft Teams
  • Small Business
Developer & IT
  • Developer Center
  • Documentation
  • Microsoft Learn
  • Microsoft Tech Community
  • Azure Marketplace
  • AppSource
  • Microsoft Power Platform
  • Visual Studio
Company
  • Careers
  • About Microsoft
  • Company news
  • Privacy at Microsoft
  • Investors
  • Sustainability
English (United Kingdom) California Consumer Privacy Act (CCPA) Opt-Out Icon Your Privacy Choices
  • Contact Microsoft
  • Privacy
  • Manage cookies
  • Terms of use
  • Trademarks
  • About our ads
  • EU Compliance DoCs
  • Regulatory reporting
  • © Microsoft 2023