Category: incident management

Sep 16, 2024

↗

Log Source Availability Monitoring with KQL in Microsoft Sentinel: An Essential Query for SOC Teams
Aug 27, 2024

↗

Suppressing Defender for XDR Incidents Using Automation Rules in Microsoft Sentinel: A Step-by-Step Guide
Aug 18, 2024

↗

Mastering Sentinel: The Essential KQL Query for Every SOC Team
Jun 6, 2024

↗

Troubleshoot Log Ingestion Drops to Microsoft Sentinel from Linux Machines: Addressing /var/log Capacity Issues
May 24, 2024

↗

Why Incident Counts Differ in Microsoft Sentinel: Portal vs. SecurityIncident Table
May 2, 2024

↗

Streamlining Bulk Incident Closure in Azure Sentinel with PowerShell