New Blog Post | Microsoft Sentinel this Week - Issue #62

Happy Friday all!

 

Welcome to the 62nd issue of our fine Microsoft Sentinel newsletter. There’s lots of great content this week (as usual some would say) and only a couple additional things to highlight.

…

First off, of all places, I’m driving to Ft. Wayne, Indiana on Saturday. I’ll be driving 3 hours to make my session time for BSides Security Ft. Wayne. This is an annual security conference held at Sweetwater Sound. If you’re not familiar, Sweetwater is one of the largest music equipment distributors in the US. I’ve never been there before, but my youngest son (the drummer in the band, Urbania) loves the place and visits a couple times a year.

So, I’m really looking forward to talking about SOC Efficiency with this group. Wish me luck!

And if you happen to be attending this thing, let me know.

Due to the 3-hour drive each way, I probably won’t be hanging around for too long after I deliver my session.

And even if you can’t join in-person, you can join virtually:

Live Chat: https://lnkd.in/gmUUxwMg

Live Stream: https://lnkd.in/g9M5rbfi

…

We have a YAMS (Yet Another Microsoft Survey) this week. Help us help you!

The Microsoft Sentinel engineering team is looking to improve and increase the list of Microsoft Sentinel tutorials that you can find at https://docs.microsoft.com/azure/sentinel/, under the section Tutorials (see picture in the first question). The tutorials are created to help customers who are either at the initial steps of their Microsoft Sentinel deployments, or expanding them, and who are looking for guidance on securing their most important scenarios. 

Respond here: https://cda.ms/4jM

…

Before leaving you to the newsletter content, I have one more big note.

The Must Learn KQL learning series is an unequivocal success but more needs to be done. I outline in a recent post the number of completion certificates I’ve handed out already and while that number is wonderful, more people need to get the message how important learning KQL really is.

So, the Must Learn KQL book is now available on Amazon!

Kindle version: https://amzn.to/3MyMOOS

Paperback: https://amzn.to/3sN8ajE

Hardcover: https://amzn.to/3yOAFRS

This gives it a much wider audience and like everything that’s part of this learning series, any and all profit goes directly to St. Jude Children’s Research Hospital.

I owned and sold an eBook publishing company (NetImpress) way back in 2004-2005 before even Amazon had concocted its own eBook production methods. It was revolutionary at the time and most of what our company did had to be invented. And, while many of the same things I learned through NetImpress are still valid and useful today, there are many aspects that have changed or just didn’t exist. Developing and delivering Must Learn KQL series has been a pioneering experience on all the nuances of producing a learning series in this manner and I suspect others will take notice and begin duplicating my efforts.

There are some other things to tweak, but I do know that I’ll be doing it again with another series in the very near future. Stay tuned.

…

That’s it for now. Have a wonderful weekend and week ahead.

 

Talk soon.