Blog Post

Microsoft Sentinel Blog
6 MIN READ

Creating digital tripwires with custom threat intelligence feeds for Azure Sentinel

robeving's avatar
robeving
Icon for Microsoft rankMicrosoft
Apr 20, 2020
Azure Storage allows you to store all kinds of data in the cloud. By default, this data is private or constrained to authorized accounts, but Azure Storage also allows you to share data worldwide. If...
Updated Nov 03, 2021
Version 6.0
detection
hunting
microsoft sentinel
security
robeving's avatar
Icon for Microsoft rankMicrosoft
Joined April 02, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Sentinel by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

robeving's avatar
robeving
Icon for Microsoft rankMicrosoft
Apr 20, 2020

The Diagnostic Logs will give you detailed information on the type of events that occurred in the storage account including information like UserAgent string, IP address, API etc. Much of this information is unavailable in the ActivityLog view, at least for the storage accounts I've inspected.

 

Expect to see audit activity and policy changes in the ActivityLog and detailed diagnostic information in the $logs directory.