New Template Update Verification Feature for Azure Sentinel Analytics Rules

A new feature has been added for Analytics Rules in Azure Sentinel that allows you to verify the changes prior to accepting to update the rule from the updated template. Our Analytics Rules are updated from time-to-time for various reasons. Mostly, they are updated to improve detection. But, there may be times a rule that … Continue reading New Template Update Verification Feature for Azure Sentinel Analytics Rules →

Subtle Azure Sentinel Console Change in New Content Management Area

For those Azure Sentinel customers digging into the console this morning, you'll notice a slight change in the layout. Solutions and Community have been pulled from the original spot under the Configuration area and placed in a new Content Management section. Solutions seems a tad bit out of place and it really seems like News … Continue reading Subtle Azure Sentinel Console Change in New Content Management Area →

How to Help Invent the SOC Score for Azure Sentinel

This is something that's been on my mind for a long time and with an upcoming in-person conference on my docket, I figured it was time to see it through. This was a feature that was raised by a customer a couple years ago. They wanted a standard number, much like a "credit" score, that … Continue reading How to Help Invent the SOC Score for Azure Sentinel →

How to Add the New Azure Sentinel Hunting Columns for MITRE Techniques, Results Delta, and Results Delta Percentage

Those sneaky Azure Sentinel engineers! A few new data points have shown up in the Azure Sentinel console, specifically in the Hunting section. These data points are available as new columns in the Hunting display and include: MITRE ATT&CK Techniques - This is the more specific technique that's associated with the based tactic. You can … Continue reading How to Add the New Azure Sentinel Hunting Columns for MITRE Techniques, Results Delta, and Results Delta Percentage →