Automation

Automation | azure | Azure Sentinel | Cyber Security | Data management | incident management | Microsoft | Microsoft security

Microsoft Sentinel Storage Explained: Analytics Tier vs Data Lake vs Data Archive
BySujit Mahakhud February 4, 2026April 12, 2026
Microsoft Sentinel offers three storage options: Analytics Tier, Sentinel Data Lake, and Data Archive, each serving distinct purposes. Proper storage tiering is crucial to avoid high costs and inefficiencies. Understanding each tier’s intended use—detection, investigation, or compliance—is vital for effective security operations and maintaining a scalable system.
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Microsoft Sentinel Storage Explained: Analytics Tier vs Data Lake vs Data Archive
Automation | Cyber Security | powershell

Automating Azure VM & Arc Server Data Collection Rule Association with PowerShell
BySujit Mahakhud September 26, 2025April 11, 2026
Onboarding Azure VMs and Arc-enabled servers to Data Collection Rules (DCRs) is critical for monitoring and security, but doing it manually can be time-consuming and error-prone. This blog introduces a PowerShell automation script that simplifies the process: it detects machine type, installs the Azure Monitor Agent if missing, associates machines with DCRs, and logs results for auditing. Ideal for both beginners and advanced Azure administrators, this solution saves time, reduces errors, and scales across multiple subscriptions effortlessly.
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Automating Azure VM & Arc Server Data Collection Rule Association with PowerShell
Automation | azure | Azure Sentinel | Blogging | Cyber Security | Microsoft | Microsoft security | powershell

Automate Data Collection Rule and Virtual Machine Association Using PowerShell in Microsoft Sentinel
BySujit Mahakhud December 6, 2024April 11, 2026
Effortlessly streamline your Microsoft Sentinel integration with this comprehensive guide. Learn how to automate data collection rule (DCR) association and Azure Monitor Agent (AMA) installation for virtual machines (VMs) using a single PowerShell script. Introduction Integrating VMs with Microsoft Sentinel is essential for robust security monitoring. However, manually managing Azure Monitor Agent installation and Data…
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Automate Data Collection Rule and Virtual Machine Association Using PowerShell in Microsoft Sentinel
Automation | azure | Azure Sentinel | Cyber Security | incident management | Microsoft security

Suppressing Defender for XDR Incidents Using Automation Rules in Microsoft Sentinel: A Step-by-Step Guide
BySujit Mahakhud August 27, 2024April 11, 2026
In today’s cybersecurity landscape, managing a high volume of security alerts can be overwhelming for security operations teams. This is especially true for organizations using Microsoft Defender for XDR (Extended Detection and Response) integrated with Microsoft Sentinel. While these tools provide robust threat detection and response capabilities, the sheer number of incidents generated can lead…
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Suppressing Defender for XDR Incidents Using Automation Rules in Microsoft Sentinel: A Step-by-Step Guide
Automation | azure | Azure Sentinel | Cyber Security | incident management | Microsoft | Microsoft security

Troubleshoot Log Ingestion Drops to Microsoft Sentinel from Linux Machines: Addressing /var/log Capacity Issues
BySujit Mahakhud June 6, 2024April 11, 2026
In this blog, we’ll address a common issue causing drops in log ingestion from Linux machines to Microsoft Sentinel: the /var/log directory filling up. Learn how to automate log maintenance with cron jobs to keep your logs flowing smoothly and ensure uninterrupted monitoring and analysis with Microsoft Sentinel.
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Troubleshoot Log Ingestion Drops to Microsoft Sentinel from Linux Machines: Addressing /var/log Capacity Issues
Automation | Cyber Security | incident management | powershell

Streamlining Bulk Incident Closure in Azure Sentinel with PowerShell
BySujit Mahakhud May 2, 2024April 11, 2026
Automate Azure Sentinel incident closure with PowerShell. Effortlessly close multiple incidents at once, saving time for critical security tasks.
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Streamlining Bulk Incident Closure in Azure Sentinel with PowerShell
Automation | Azure logic apps | Cyber Security

Automating Email Notifications for Azure KQL Rule using Azure Logic Apps
BySujit Mahakhud March 31, 2024April 11, 2026
In today’s digital landscape, maintaining Azure environment security is vital. Use Azure Logic Apps to automate email notifications for KQL rule triggers. Steps include creating a Logic App, designing the workflow, setting up recurrence, querying Azure Monitor Logs, formatting data, and sending email notifications via Office 365 Outlook. Stay informed and proactive.
Share this:
X
Facebook
LinkedIn
Telegram
Threads
WhatsApp
Mastodon
More
X
Like this:
Like Loading...
Read More Automating Email Notifications for Azure KQL Rule using Azure Logic Apps

Share this:

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this: