Microsoft Sentinel | Ingest Logs from Linux Machines

preview_player
Показать описание

Playlist –
  1. Concepts Work
  2. Microsoft Sentinel
  3. SIEM
  4. Cybersecurity
  5. CloudSecurity
  6. ITsecurity
Рекомендации по теме
Microsoft Sentinel | 0:13:34

Microsoft Sentinel | Ingest Logs from Linux Machines

Microsoft Sentinel | 0:19:07

Microsoft Sentinel | Custom Log Ingestion | Any format

How to Run 0:02:39

How to Run a Query on Basic Logs [Microsoft Sentinel Demo]

Microsoft Sentinel | 0:19:49

Microsoft Sentinel | Custom Log Data Ingestion | Postman | PowerShell

Learn to Ingest 0:15:25

Learn to Ingest data from Connectors in Microsoft Sentinel | Free Lab Walkthrough - Module 2

Ingest CEF logs 0:53:04

Ingest CEF logs from Network devices to Microsoft Sentinel | 1hr Complete Demonstration

Microsoft Sentinel Cost 0:09:14

Microsoft Sentinel Cost Optimization Secrets

Microsoft Sentinel | 0:17:13

Microsoft Sentinel | Windows data Ingestion

Microsoft Sentinel | 0:33:59

Microsoft Sentinel | Threat Detection | Scheduled Query Rule | How to create Analytics Rules?

Microsoft Sentinel in 0:36:20

Microsoft Sentinel in just 30 minutes

Microsoft Sentinel Pricing 0:07:17

Microsoft Sentinel Pricing Explained

Microsoft Sentinel | 0:12:34

Microsoft Sentinel | What is Microsoft Sentinel?

How to send 0:01:28

How to send Unix OS logs to Microsoft Sentinel [Microsoft Sentinel FAQ]

Microsoft 365 Defender: 0:06:00

Microsoft 365 Defender: Microsoft Sentinel integration

Step-by-Step Activate Azure 0:49:27

Step-by-Step Activate Azure Analytics Workspace & Azure Sentinel & Ingest Palo Alto CEF Logs

Create a Custom 0:11:12

Create a Custom Log Source for Microsoft Sentinel

Transforming Data at 0:51:23

Transforming Data at Ingestion Time in Microsoft Sentinel | Microsoft Sentinel Webinar

How to use 0:06:11

How to use the Azure Monitor Agent to send logs

AMA Agent With 0:10:21

AMA Agent With Sentinel

Using Threat Intelligence 0:23:51

Using Threat Intelligence in Microsoft Sentinel - Connectors, Logs | Free Lab Walkthrough - Module 7

Microsoft Sentinel | 0:07:18

Microsoft Sentinel | Enabling Data Connectors

Azure Monitor Logs 0:29:30

Azure Monitor Logs Log Types

View Query Audit 0:05:50

View Query Audit Logs in Microsoft Sentinel

Data Connectors onboarding 0:17:32

Data Connectors onboarding | Windows Security Events | Syslog (Linux)

Комментарии
Автор

Could you also do a video on how to inject AWS security logs (either from Security hub or CloudTrail) into Sentinel ?

srikanthk-sb
Автор

Awesome video series as always.

On the DCR Rules, is there a way to approximate the size of the logs that will be ingested vs the old MMA methos (grabs everything) when selecting Common Events vs All Events.

Also, is selecting just Common Events good enough from a security monitoring point of view, or are some other logs covered via the All Events (ingesting everything) that the Common Events wouldn't cover.

If that is the case, are we able to select the common Events option, but also include some other type of events we want ingested via additional X-Path queries.

Just asking as I know if the past we had an issue where logs that we were ingesting suddenly spiked to over $100K a month from previous $10K and really don't want to run in to an issue like that again

RichardGailey