Blog Post

Microsoft Sentinel Blog
7 MIN READ

Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2

ianhelle's avatar
ianhelle
Icon for Microsoft rankMicrosoft
Apr 26, 2019
Follow ianhellen on twitter. Read Part 1 of this series.   In part 1 we began with a Threat Intelligence report identifying several IP addresses as known malicious. Searching for the IP add...
Updated Mar 23, 2021
Version 7.0
hunting
investigation
jupyter
notebooks
ianhelle's avatar
Icon for Microsoft rankMicrosoft
Joined April 03, 2019
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

Nodrog's avatar
Nodrog
Copper Contributor
Aug 14, 2019

Ah I see. So why can't Sentinel use LinuxAudit?

 

Sorry if this is the wrong place to ask but I'm trying to get LinuxAudit working at the moment and the data doesn't seem to show up in the workspace.

I wasn't sure if it had been silently retired or something. I've had a support request open for a while but no one has replied. 

All I can find is this https://github.com/microsoft/OMS-Agent-for-Linux/issues/633.