Sentinel

By: Francisco Piriz, MSc; Research and Development Engineer at Digital Sense; in collaboration with Javier Preciozzi, PhD; Managing Partner at Digital Sense. A Context of Opportunities Uruguay is part of Digital Nations, where among ten other countries around the globe (such as Israel, Korea, New Zealand, and England) it is…

At FalconForce, we have built a large repository of over 350 detection queries. A question we get asked a lot is: “how do you manage and deploy such a collection at scale?” Because we want to support the infosec community we have decided to release our internally developed file format…

Introduction: HashiCorp Sentinel is a powerful policy-as-code framework that enables organizations to define, enforce, and audit policies across their applications and infrastructure. By integrating Sentinel with Terraform, you can ensure that your infrastructure complies with industry standards, security requirements, and internal guidelines. We will explore what Sentinel is, how to install…

Intune Endpoint Security Configuration Settings have become the way to go for configuring security features on various platforms. What did start with Microsoft Defender for Endpoint settings for Windows clients has evolved to settings for macOS, Windows Servers and is treated like a first class citizen. …

Hi Medium! Here we are again with a new article about Sentinel this is the follow-up (part 2) to the previous article Detect FIN6 on Sentinel Part 1: Run FIN6 exploit. This article To give a summary of the previous article, we created our lab environment and simulated the FIN6…

Updating the What's New workbook with Logic Apps Building a Better What's New Page for Microsoft Sentinel For the longest time, I gotten asked almost once a week why the What's New blade in the Microsoft Sentinel console is…rodtrent.substack.com Based on the work in the awesome Rod Trent’s blog above. I thought it might be nice to make a Logic App version without PowerShell, for anyone wanting to run it as a pure cloud thing.

While browsing twitter, I came across Kusto Detective Agency — a gamified way of learning Kusto Query Language (KQL). There are a set of five challenges that participants are required to solve using their KQL skills and earn badges. …

Microsoft Sentinel is a cloud-native security information and event management (SIEM) solution that provides threat hunting capabilities to organizations. Threat hunting involves proactively searching for and identifying security threats that may have been missed by traditional security tools and techniques. Some examples of threat hunting capabilities provided by Microsoft Sentinel…