Subscribe
Sign in
Home
Archive
About
Latest
Top
Discussions
Tiers and tables and more! Oh my!
Which tables can I send to the Sentinel data lake?
Jul 31
•
Andrea Fisher
and
Mike Palitto
2
Share this post
SOCAutomators
Tiers and tables and more! Oh my!
Copy link
Facebook
Email
Notes
More
3
Security Ops Revolution: Riding the wave
A No-BS Guide to Crushing the Next Era of Cybersecurity
Jul 29
•
Andrea Fisher
and
Mike Palitto
1
Share this post
SOCAutomators
Security Ops Revolution: Riding the wave
Copy link
Facebook
Email
Notes
More
Tier change: failed to update retention settings - Internal server error
If you're kicking the tires on the Sentinel data lake and gettting the error “Tier Change xxx table: failed to update retention settings - Internal…
Jul 29
•
Andrea Fisher
Share this post
SOCAutomators
Tier change: failed to update retention settings - Internal server error
Copy link
Facebook
Email
Notes
More
How do I actually get data into the Sentinel data lake?
The Sentinel data lake has arrived, and people seem very excited.
Jul 28
•
Andrea Fisher
and
Mike Palitto
Share this post
SOCAutomators
How do I actually get data into the Sentinel data lake?
Copy link
Facebook
Email
Notes
More
What should I log in my data lake?
We’ve been asked a few times to update our What should I log in my SIEM? post.
Jul 28
•
Andrea Fisher
and
Mike Palitto
4
Share this post
SOCAutomators
What should I log in my data lake?
Copy link
Facebook
Email
Notes
More
NTLM Auditing Just Got a Glow-Up in Windows 11 24H2 & Server 2025
Alright, folks—if you’ve ever found yourself squinting at NTLM logs wondering where this ancient protocol is still lurking in your environment and who…
Jul 23
•
Andrea Fisher
1
Share this post
SOCAutomators
NTLM Auditing Just Got a Glow-Up in Windows 11 24H2 & Server 2025
Copy link
Facebook
Email
Notes
More
We told you so! Data lake is here!
Hey everyone!
Jul 22
•
Andrea Fisher
and
Mike Palitto
Share this post
SOCAutomators
We told you so! Data lake is here!
Copy link
Facebook
Email
Notes
More
March 2025
Are you getting the most out of Threat Intelligence in Sentinel?
Correlating threat intelligence feeds with your Security Information and Event Management (SIEM) data can significantly enhance your organization's…
Mar 21
•
Andrea Fisher
2
Share this post
SOCAutomators
Are you getting the most out of Threat Intelligence in Sentinel?
Copy link
Facebook
Email
Notes
More
January 2025
New Year! New Cybersecurity You?
As I’ve gotten older, I only make fun New Year’s Resolutions.
Jan 3
•
Andrea Fisher
2
Share this post
SOCAutomators
New Year! New Cybersecurity You?
Copy link
Facebook
Email
Notes
More
1
December 2024
New features in Sentinel to optimize storage and alert coverage
Without a doubt, SOC Optimization has been one of my favorite additions to Sentinel this year.
Dec 23, 2024
•
Andrea Fisher
Share this post
SOCAutomators
New features in Sentinel to optimize storage and alert coverage
Copy link
Facebook
Email
Notes
More
1
September 2024
A little trick to help with Aux Logs and DCRs
If you’ve tried using the default instruction for creating a DCR, you might have experienced a few issues.
Sep 24, 2024
•
Andrea Fisher
1
Share this post
SOCAutomators
A little trick to help with Aux Logs and DCRs
Copy link
Facebook
Email
Notes
More
What to do if your Sentinel Data Connector is showing as [DEPRECATED]
I’ve had several Sentinel users raise the alarm that some of the data connectors they were using suddenly show as deprecated in the user interface.
Sep 20, 2024
•
Andrea Fisher
1
Share this post
SOCAutomators
What to do if your Sentinel Data Connector is showing as [DEPRECATED]
Copy link
Facebook
Email
Notes
More
Share
Copy link
Facebook
Email
Notes
More
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts