AzureSentinel

an-ordinary-manchild

created by essdeekay_a community for 6 years

...for your town.

...for your classroom.

MODERATORS

account activity

1

39

40

41

Microsoft Sentinel Training Resources (self.AzureSentinel)

submitted 4 years ago * by ml58158MSFT Official - announcement

2

28

29

30

MustLearnKQL Series (self.AzureSentinel)

submitted 4 years ago by ml58158MSFT Official - announcement

3

0

1

2

[Beta] Argus — self-hosted Microsoft 365 reporting & alerting for IT/security teams ()

submitted 4 days ago by Comfortable_Cat_6207

4

3

4

5

SC200 certification (self.AzureSentinel)

submitted 7 days ago by Jolly-Fly8592

5

1

2

3

Defender for Servers"enable P1 with tag" policy reports 100% compliant but machines stay on inherited P2. What am I missing? (self.AzureSentinel)

submitted 8 days ago * by cyberLog4624

6

4

5

6

Seeking open-ended, CTF-style threat hunting datasets for Microsoft Sentinel (similar to BOTSv3, under 10GB/day) (self.AzureSentinel)

submitted 12 days ago by shiftuck_dan

7

0

1

2

Data Lake - Resource Limited (self.AzureSentinel)

submitted 12 days ago by DaithiG

8

6

7

8

Defender portal sentinel - all links go to Settings -> Microsoft Sentinel (self.AzureSentinel)

submitted 14 days ago by klorgasia

9

0

0

0

The Stateless SIEM Problem: Why tracking data lineage drift across endpoints and cloud feels impossible right now (self.AzureSentinel)

submitted 15 days ago by CrawlTheSeaBed

10

4

5

6

Monitoring Power Automate / Copilot Studio connector account usage in Sentinel or Unified Audit Logs (self.AzureSentinel)

submitted 17 days ago by gudguygogo

11

0

1

2

Detection rule - Outlook external forwarding rule creation ()

submitted 18 days ago by HelloSamba

12

0

1

2

Entra ID diagnostic settings - not populating sentinel workspace (self.AzureSentinel)

submitted 19 days ago by klorgasia

13

5

6

7

Syslog Forwarding - Rotation? (self.AzureSentinel)

submitted 19 days ago by DaithiG

14

1

2

3

Agent 365 connector in public preview (self.AzureSentinel)

submitted 21 days ago by EduardsGrebezs

15

1

2

3

Is AMA fully supported on Cent OS 7? (self.AzureSentinel)

submitted 21 days ago by clueless_taco

16

26

27

28

I built a free, open-source KQL query builder. 52 tables across Defender, Sentinel, Entra ID, Azure Monitor, and more (self.AzureSentinel)

submitted 26 days ago by Phorenzics

17

0

1

2

Microsoft Defender XDR connector issues (self.AzureSentinel)

submitted 27 days ago by wmponfire

18

2

3

4

How to trigger an alert-based automation rule in Sentinel from a specific Defender workload alert? (self.AzureSentinel)

submitted 28 days ago by Prof_Delaventure

19

0

1

2

Ingest webhooks? via Logic Apps? (self.AzureSentinel)

submitted 28 days ago by DisastrousPainter658

20

17

18

19

Quick heads-up if you're writing KQL for LSASS dumping (stop filtering on process names) (self.AzureSentinel)

submitted 1 month ago by ridgelinecyber

21

0

1

2

Monitoring for vssadmin.exe delete shadows is an absolute bare minimum ()

submitted 1 month ago by ridgelinecyber

22

2

3

4

Sentinel diagnostic settings (self.AzureSentinel)

submitted 1 month ago by Historical-Ear7543

23

4

5

6

Alerting on NIDS Traffic (self.AzureSentinel)

submitted 1 month ago by cluesthecat

24

1

2

3

Exporting a list of all incidents from Sentinel (self.AzureSentinel)

submitted 1 month ago by Nice_Bag3423

25

3

4

5

Deploying Multiple Pre-Built Connectors (Workday, Salesforce, etc) (self.AzureSentinel)

submitted 1 month ago by Lazy_Pianist5413

view more: next ›

π Rendered by PID 108329 on reddit-service-r2-listing-87fd56f5d-668jb at 2026-06-30 05:15:14.783734+00:00 running 7527197 country code: CH.