SecOpsLab

Home
Archive
About
New
Top
Discussion
October 2023
Quality assurance in Microsoft Sentinel: how to ensure accurate threat detections?
You've just pushed 100 Analytics Rules to a Sentinel instance. Mission accomplished, right?
 • 
Mikko Koivunen
August 2023
Unlocking Application Visibility in Defender for Cloud Apps
A quick article on how to give an application administrator restricted visibility to a specific app in Defender for Cloud Apps.
 • 
Mikko Koivunen
June 2023
Introducing the SolutionKB
I am building something new - a searchable database for Microsoft Sentinel Content Hub Solutions.
 • 
Mikko Koivunen
Maintain a Watchlist on Public IPs in Azure
A simple Logic App for collecting Public IP address resources into a Microsoft Sentinel Watchlist from your Azure tenant
 • 
Mikko Koivunen
1
May 2023
April 2023
Incident management & on-call schedules with Microsoft Sentinel
Are there benefits in using a separate incident management platform together with a SIEM? Let's investigate.
 • 
Mikko Koivunen
March 2023
Using Managed Identities in Azure AD response playbooks
Some notes related to authenticating with the out-of-the-box (OOTB) provided Microsoft Sentinel Playbooks for Azure AD.
 • 
Mikko Koivunen
February 2023
Enterprise-scale SecOps: Azure architecture
How to deploy a well-architected security toolkit in Azure?
 • 
Mikko Koivunen
January 2023
November 2022
© 2023 Mikko Koivunen
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great writing