UEBA behaviors layer in Microsoft Sentinel: from raw logs to behavioral intelligence
Learn about the UEBA behaviors layer in Microsoft Sentinel. What it does, how to enable it, and use it for investigation and threat hunting.
7 minute read
Modern Security: Microsoft security, Sentinel, Defender XDR and identity guides
Page 2 of 5
All articles
Microsoft Defender for Cloud Apps: AI agent monitoring and real-time protection
Learn how to set up Microsoft Defender for Cloud Apps AI agent monitoring. Covers inventory, advanced hunting, and real-time protection.
9 minute read
Proactively Block Cloud Apps (like AI) with Microsoft Defender for Cloud Apps and Defender for Endpoint
Learn how to block shadow IT and risky cloud applications (like AI apps) using Microsoft Defender for Cloud Apps with Defender for Endpoint.
14 minute read
Microsoft Sentinel data lake: implementation guide
Guide to implement Microsoft Sentinel data lake step-by-step, cost optimization, DCR transformation, advanced analytics and management.
21 minute read
Automatic Attack Disruption in Microsoft Defender XDR
Step-by-step guide to implementing Microsoft's Automatic Attack Disruption in Defender XDR, with all the configuration and products needed.
12 minute read
Selective Isolation in Defender for Endpoint – Combining tools like Velociraptor for DFIR
Use Microsoft Defender for Endpoint's Selective Isolation with Velociraptor to investigate compromised endpoints remotely, full DFIR without losing access.
7 minute read
Integrating Microsoft Defender EASM with Exposure Management
Integrate Microsoft Defender EASM with Exposure Management to enrich attack paths with external risk data and strengthen your posture.
5 minute read
Automatically tagging MITRE techniques with AI in SOC Optimization
Learn how Microsoft Defender XDR automatically maps analytics rules to MITRE tactics and techniques using AI. Step-by-step guide with SOC examples.
3 minute read