Blog Post

Microsoft Sentinel Blog
7 MIN READ

Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2

ianhelle's avatar
ianhelle
Icon for Microsoft rankMicrosoft
Apr 25, 2019
Follow ianhellen on twitter. Read Part 1 of this series.   In part 1 we began with a Threat Intelligence report identifying several IP addresses as known malicious. Searching for the IP add...
Updated Mar 23, 2021
Version 7.0
hunting
investigation
jupyter
notebooks
ianhelle's avatar
ianhelle
Icon for Microsoft rankMicrosoft
Aug 14, 2019

Nodrog 

Yep. Russell (author of the blog) is in the same team as me and I have been working with the OMS auditd data for a while in Azure Security Center. Unfortunately, this isn't yet there in the Azure Sentinel implementation - so this is a kind of stop-gap until it arrives.

More generally though, this was meant to be an illustration of how you might deal with logs that needed a lot of processing before they were usable.