☁️ Charbel N.’s Post

📣[NEW BLOG] — Once data sources are connected to #MicrosoftSentinel, we can visualize and #monitor the data using #workbooks built on #AzureMonitor workbooks. These workbooks include tables and charts with analytics for logs and #KQL queries. 🔐 #MicrosoftSentinel comes with #ContentHub, which you can use #OOTB to get content value and start using Microsoft Sentinel quickly. 📔 Manually updating #workbooks can be tedious, especially if many Content Hub solutions are installed. Updating these workbooks every week or month can be time-consuming and boring, right? 🚫 Well, no more... 🚀 This article will show you how to automatically update #Microsoft #Sentinel Workbooks at scale using #PowerShell and #RESTAPI for streamlined #security management. 👇👇👇 #MicrosoftSecurity #Automation #SecOps #AzureSecurity #MicrosoftDefender #SIEM #XDR

📣[NEW BLOG] #MicrosoftDefender External Attack Surface Management (EASM) provides organizations with a comprehensive view of their digital #attack surfaces. 🔎 EASM discovers known and unknown resources, from web pages to IP addresses and domains, helping prioritize #risks and #defend against potential #threats. ➕ Integrating #Defender #EASM into #MicrosoftSentinel becomes essential so that you have only one platform to monitor and respond to threats. 🚀 Learn how to set up Defender #EASM and maximize its dashboards in Microsoft Sentinel for effective #ThreatMonitoring and #incident response. 👇👇👇 #MicrosoftSecurity #DefenderEASM #MicrosoftSentinel #CloudSecurity

🔐 [NEW BLOG] – #Microsoft #security researchers have developed a collection of over 50+ out-of-the-box #UEBA query activities for #MicrosoftSentinel. 🎭 These activities will run and display for an entity, providing you with up-to-the-minute #information in the #entity timeline. 🛠️ Once you create or customize an activity, your entity pages will display only those activities, not out-of-the-box ones. ✅ In this article, we will show you how to customize and enable #Sentinel #UEBA activity templates at scale so that you can continue seeing these activities on your entity pages. 👇👇👇 #MicrosoftSecurity #MicrosoftUEBA #Automation #SecOps #AzureSecurity #MicrosoftDefender

📣 [Just Announced] – You can now sign up for pre-purchase plans for #MicrosoftSentinel, a type of #Azurereservation. When you purchase a pre-purchase plan, you receive commit units #CUs at discounted tiers for Microsoft Sentinel. ℹ️ The Microsoft Sentinel commit units (SCUs) can be used to pay eligible costs in your #LogAnalytics workspace. Opting for the right pre-purchase plan can save you money when you have predictable costs! 💰 Check how to optimize #Microsoft #Sentinel costs with a #prepurchase plan. 👇👇👇 https://lnkd.in/etMHrcth #MicrosoftSecurity #CostOptimization #MicrosoftSentinel

📣[NEW BLOG] — The #Microsoft365 Administrator has expert-level skills in evaluating, planning, migrating, deploying, and managing #Microsoft 365. They perform #M365 tenant-level planning, implementation, and administration of #cloud and #hybrid environments. 🎓This study guide will share how to successfully prepare and pass the MS-102 exam — Microsoft 365 Certified Administrator Expert. 👇👇👇 #MicrosoftCertified #MicrosoftLearn #MicrosoftEntra #EntraID #MS102

📣[NEW BLOG] – Understanding how to effectively use #Microsoft #Sentinel User and Entity Behavior Analytics #UEBA can enhance your organization's #security posture.   🔐Setting up and configuring UEBA within #MicrosoftSentinel gives you a powerful tool for #detecting and responding to potential #threats. 🚀UEBA advanced #analytics system leverages #MachineLearning and behavioral analysis to identify #anomalies that may indicate #security breaches or insider #threats. ✅In this article, we'll dive deep into #Microsoft #Sentinel UEBA, look at its #architecture, and see how to enable it to detect anomalies, query the data, and investigate using #UEBA. 👇👇👇 https://lnkd.in/eT4v7M_J #MicrosoftSecurity #CloudSecurity #AzureSecurity #MicrosoftDefender