Andrew Lowes

New blog posts: Part 1: What is a FIDO2 key and how to set one up for emergency access in Entra ID cloudbuild.co.uk/part-1-what-is… Part 2: Configure a Yubikey for an emergency access account in Entra ID cloudbuild.co.uk/part-2-configu… #Microsoft #Entra #EntraID

Sentinel Tip - Set Up Alerts: Configure alerts to notify you of critical incidents in real-time. Alerts ensure that you are promptly informed of any significant events. #Alerts #RealTime #Notification

A summary update on Azure News that includes updates released from Microsoft Azure related to Azure, Architecture, Compute, and Sentinel topics. Every update is linked to it's original Microsoft Azure, Microsoft Sentinel or other blog source. azuretracks.com/2024/11/azure-…

Sentinel Tip - Configure Data Transformation: Apply data transformation rules to normalize and enrich ingested data. This ensures that data is consistent and useful for analysis & helps reduce data that is not utilized for analytics. #DataTransformation

Exposure management and Attack Surface Map are very exciting! Dynamic attack path mapping and shaping as part of enterprise defense is looking more thorough and accurate! #msignite aka.ms/exposuremanage…

Going beyond Copilot adoption and usage, the new Copilot Analytics will support organizations to deeply understand how Copilot is integrating and measure those metrics. #msignite aka.ms/CopilotAnalyti…

Sentinel Tip - Optimize Log Retention: Adjust log retention settings to balance cost and data availability. Proper retention settings help in managing storage costs while ensuring data is available when needed. #LogRetention #CostManagement

Sentinel Tip - Configure Data Connectors: Prioritize and configure data connectors based on your security needs. Data connectors enable seamless integration with various data sources. #DataConnectors #Integration #Security

Veterans want Canadians to understand the price of freedom. They are passing the torch to the people of Canada, so the memory of their sacrifices will continue, and the values they fought for will live on in all of us. Thank you to all veterans.

Sentinel Tip - Set Up Custom dashboards to monitor key metrics and incidents. Dashboards provide a centralized view of your security posture. You can use KQL hunting and research queries and pin the results to your Azure dashboard. #CustomDashboards

Sentinel Tip - Use Logic Apps: Create Logic Apps to automate workflows and responses. Logic Apps provide a powerful way to automate repetitive tasks. Also use these automation tools to provide external notifications and priority alerting for critical

A summary update on Azure News that includes updates released from Microsoft Azure related to Azure, Architecture, Compute, and Sentinel topics. Every update is linked to it's original Microsoft Azure, Microsoft Sentinel or other blog source. azuretracks.com/2024/11/azure-…

Sentinel Tip - Integrate with Microsoft Defender: Enhance security by integrating Sentinel with Microsoft Defender XDR. This provides a unified security solution across your environment. If you use 3rd party endpoint tools be sure to integrate that data!

Stay Ahead of Cyber Threats with the Microsoft Digital Defense Report 2024 - Discover the latest insights into the evolving cyber threat landscape, including nation-state and cybercriminal activities. microsoft.com/en-us/security…

Sentinel Tip - Monitor Sentinel Health: Regularly check the health and performance of your Sentinel deployment. Monitoring ensures that your system is running optimally. #HealthMonitoring #Performance #Optimization

Sentinel Tip - Develop an internal governance process: Revisit and review configurations, data ingestion, analytics rules, automations, cost management, and your SOC tools regularly to ensure you get the most out of Microsoft #Sentinel and your team!

Sentinel Tip - Use Microsoft Sentinel Mitre Att&ck Dashboard: Learn more about your current coverage and detections & what areas can be strenghthened to better protect your assets. Update your analytics rules to reflect threat mapping to take full

Sentinel Tip - Set Up Playbooks: Develop playbooks for automated incident response actions. Playbooks help in standardizing and automating response procedures. #Playbooks #IncidentResponse #Automation

Sentinel Tip - Automate Incident Handling: Use automation rules to streamline incident response processes. This reduces manual effort and speeds up response times. #Automation #IncidentResponse #Efficiency

How much Copilot for Security depth have you explored? Start building out Promptbooks and let Copilot add instant depth of understanding for your SOC Analysts. github.com/Azure/Copilot-…