Blog

Microsoft Sentinel Multi-Tier Strategy: From Auxiliary Logs to Data Lake Mastery

Complete guide to optimizing Sentinel costs using data tiers. Real insights on automatic mirroring, auxiliary migration, and the Data Lake preview that's finally working.

Microsoft Sentinel Data Lake: Why I Can't Find It

The preview isn't showing up yet, and auxiliary logs might disappear. Here's what I'm doing to prepare for this major change.

Building a Microsoft Sentinel Attack Range for Security Testing

Learn how to build an open-source framework for testing detection capabilities in realistic Azure environments.

Entity Enrichment Using Logic Apps (VirusTotal and AbuseIPDB)

Enrich incidents with relevant analysis on entities such as file hashes, URLs, and IPs using automated Logic Apps integration.

How to Deploy a Playbook via ARM Template to GitHub

Step-by-step guide for exporting, editing, and deploying ARM templates for security playbooks via GitHub.

Demystifying Cyber Threats: AnyDesk Incident and KQL Basics

A beginner's journey through understanding the AnyDesk cyber attack and learning KQL threat hunting fundamentals.

How to Create an OpenAI Endpoint in Azure

A comprehensive step-by-step guide for setting up Azure OpenAI resources and endpoints for security automation.

Configure Your Microsoft Sentinel Environment

Set up Microsoft Sentinel to minimize costs, meet compliance requirements, and create a manageable environment for security teams.

Sentinel Automation With ARM, Terraform and API

Expedite and simplify the setup of a robust Sentinel environment using automation tools and infrastructure as code.

Convert Large Sentinel Analytics Rules JSON to Individual Files

Extract ARM/JSON files into individual rule files using Python scripting - perfect for non-programmers managing Sentinel rules.

Configure Azure Lighthouse for MSP

Onboard customers to Azure Lighthouse for centralized management and monitoring of Azure resources across tenants.

Deploy Azure AI Endpoint Using Flask App

Deploy a Flask application on Azure to interact with Azure AI endpoints using Deployment Center and local git.

Security Tools That Actually Make Your Life Easier

Honest reviews of free and paid tools, with setup guides and integration tips from real-world usage.

Building Your First Security Lab: Zero to Hero Guide

Step-by-step guide to setting up a home lab for security testing using only free tools.

From IT to Cybersecurity: Leveraging What You Already Know

How to transition from IT to security by building on your existing skills and knowledge.

Why Your Security Alerts Suck (And How to Fix Them)

Common detection rule mistakes and how to build alerts that actually catch bad guys without waking you up at 3am.