Blog

Building a Microsoft Sentinel Attack Range for Security Testing

Learn how to build an open-source framework for deploying, attacking, and monitoring a test environment in Azure. Test detection rules in realistic environments before production deployment.

Entity Enrichment Using Logic Apps (VirusTotal and AbuseIPDB)

Enrich incidents with relevant analysis on entities such as file hashes, URLs, and IPs using automated Logic Apps integration.

How to Deploy a Playbook via ARM Template to GitHub

Step-by-step guide for exporting, editing, and deploying ARM templates for security playbooks via GitHub.

Demystifying Cyber Threats: AnyDesk Incident and KQL Basics

A beginner's journey through understanding the AnyDesk cyber attack and learning KQL threat hunting fundamentals.

How to Create an OpenAI Endpoint in Azure

A comprehensive step-by-step guide for setting up Azure OpenAI resources and endpoints for security automation.

Configure Your Microsoft Sentinel Environment

Set up Microsoft Sentinel to minimize costs, meet compliance requirements, and create a manageable environment for security teams.

Sentinel Automation With ARM, Terraform and API

Expedite and simplify the setup of a robust Sentinel environment using automation tools and infrastructure as code.

Convert Large Sentinel Analytics Rules JSON to Individual Files

Extract ARM/JSON files into individual rule files using Python scripting - perfect for non-programmers managing Sentinel rules.

Configure Azure Lighthouse for MSP

Onboard customers to Azure Lighthouse for centralized management and monitoring of Azure resources across tenants.

Deploy Azure AI Endpoint Using Flask App

Deploy a Flask application on Azure to interact with Azure AI endpoints using Deployment Center and local git.