Ofer Shezaf

You wanted custom #analytics in #Microsoft #Sentinel? Microsoft Sentinel Custom Analytics hackathon project, now the video. youtube.com/watch?v=3-WGkZ…

#CEF, arguably the world's first and most pervasive attempt at security event normalization, does not provide much #normalization. How comes? And why does it matter to your security? linkedin.com/feed/update/ur…

The Advanced Security Information Model is now built into Microsoft Sentinel! aka.ms/ASimBlogBuiltin

Digital self improvement: your recommendations and what I learned through them xiom.com/2021/12/15/dig…

Day #7 of my digital transformation: which search engine should I use? #Google, #Edge, #DuckDuckGo or #Startpage? xiom.com/2021/12/13/day…

Day #6 of my digital transformation: #Startpage. Time to ponder on the experience. linkedin.com/posts/oshezaf_…

ay #5 of my digital transformation: #VPN. Can't believe I did not use one so far. Finally, I actually pay for my #privacy :-) linkedin.com/posts/oshezaf_…

Day #1: Uninstall #Chrome. Day #2: Ditch #Gmail. Day #3: Delete #Facebook account. Now Day #4: move to #DuckDuckGo. linkedin.com/posts/oshezaf_…

Day #3: Deleted my #Facebook account. A no-brainer this time as I have not logged in to Facebook for years.

The world is getting brighter from day to day. Yesterday I ditched #Chrome. Today I ditched #Gmail. I wonder what the future brings?

@accesser_jason Big Bang. No regrets.

@oshezaf Big bang approach or phased ? I removed G-Chrome from the task sequence so natural a attrition will slowly make it go away

What a wonderful day! I uninstalled Chrome from all my devices.

@janvonkirchheim This is the beauty of it. Same technology. Same interface. A very different experience. Easy switch. Amazing how the exact same thing can work so much better in #Edge than in #Chrome.

@oshezaf Well, there is one left, underneath your Edge ;-)

@Cyb3rWard0g Also supported by #AzureSentinel ASIM parsers: github.com/Azure/Azure-Se…

🚨 #Sysmon v13.30 is out! New "User" fields on several events and a new option to set the size of a field 😱 #MSTIC 1⃣ Event manifest/schema: github.com/microsoft/MSTI… 2⃣ Schema version: 4.81 3⃣ Enrich those detection/hunting rules with "user" context 😉🏹

Join my Webinar "ASIM: Making Sure Normalization Helps Performance Rather Than Impacting It" linkedin.com/events/asim-ma…

#AzureSentinel Information Model (ASIM) Fall Release: simple deployment, speed optimized parsers, an updated network schema, and #Sysmon support. techcommunity.microsoft.com/t5/azure-senti…

I am happy to announce that #Azure Sentinel Information Model (#ASIM) is expanding with a brand new File Activity schema and analytics: techcommunity.microsoft.com/t5/azure-senti…

I have been chatting about #ASIM, the #Azure Sentinel Information Model, for a while now. Now you can really learn about it in this detailed webinar: youtube.com/watch?v=WoGD-J…

Security data normalization has a very human aspect to it. In this post, I explore how normalization, and #ASIM, its #AzureSentinel take, can develop social skills and help us be more friendly. xiom.com/2021/07/19/nor…

The discussion around my recent post about #SIEM normalization turned into my favorite topic, value normalization, so I expanded on the topic: xiom.com/2021/07/07/sie…