Blog Post

Microsoft Sentinel Blog
6 MIN READ

What’s new: Detect credential leaks using built-in Azure Sentinel notebooks!

Chi_Nguyen's avatar
Chi_Nguyen
Former Employee
Jun 01, 2021
Special thanks to ZhipengZhao , JulianGonzalez, Lars_Mohr, and Microsoft CredScanCore team for making these notebooks happen. Thanks to Tiander Turpijn and Batami Gold for reviewing this blog and f...
Updated Nov 03, 2021
Version 13.0
detection
hunting
microsoft sentinel
Chi_Nguyen's avatar
Former Employee
Joined October 03, 2019
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

Chi_Nguyen's avatar
Chi_Nguyen
Former Employee
Nov 04, 2022

hugom7500 Somehow I missed your message. My apologies.

To test notebook's efficiency, I would test it with some sample data that follows the credentials format I detailed in the blog (for example, Azure Storage Account Shared Access Signature). The sample data can be ingested into either a Log Analytics custom table, ADX cluster, or blob storage. Then run the notebook and you should expect to get the sample credentials in a csv file as the notebook output.