If you don't regularly sift through Microsoft Sentinel Workbooks to find any new ones made available, you probably missed this one. There's a newer Workbook just for monitoring costs that I'm sure many Sentinel customers would appreciate. In addition to the normal costs for retention, ingestion, and logic apps it also provides an area to … Continue reading Using the Microsoft Sentinel Cost Workbook →

Similarly to new customers wanting to know how long the Microsoft Sentinel trial has been running (see: How to Monitor When the Microsoft Sentinel Trial Expires), existing customers sometimes like to know how long each Microsoft Sentinel-enabled Log Analytics Workspace has been running. The easiest way to find this is by using the Workspace Usage … Continue reading How to Tell How Long Microsoft Sentinel Has Been Enabled on a Workspace →

Added just prior to Microsoft Ignite this year, there's a new tab available in the News & Guides section in the console dedicated to the Free Trial. This Free Trial tab is the central source for getting the most out of the trial period. It includes the docs, a lab to deploy, learning, and even … Continue reading How to Monitor When the Microsoft Sentinel Trial Expires →

Three new MITRE ATT&CK tactics have shown up ready to be used for Microsoft Sentinel Hunting and Analytics Rules creation. New tactics Resource Development - The adversary is trying to establish resources they can use to support operations. Impair Process Control - The adversary is trying to manipulate, disable, or damage physical control processes. Inhibit … Continue reading Three New MITRE ATT&CK Tactics to Use for Microsoft Sentinel Hunting and Analytics Rules →