Azure Sentinel
Copied!
Home
Options
915
Ofer_Shezaf on 12-04-2019 05:27 PM
4,418
Pete Bryan on 12-04-2019 03:26 AM
1,344
Alp Babayigit on 11-25-2019 11:22 AM
1,969
Ofer_Shezaf on 11-25-2019 01:57 AM
5,344
Ashwin_Patil on 11-20-2019 07:00 AM
5,997
Cristhofer Munoz on 11-19-2019 06:12 AM
9,250
Ashwin_Patil on 11-18-2019 07:00 AM
1,637
Sarah Fender on 11-13-2019 09:41 AM
5,158
Amar Patel (C AND E) on 11-11-2019 09:52 AM
1,146
Clive Watson on 11-11-2019 03:03 AM
1,285
Alex_Karabasevic on 11-07-2019 01:07 PM
2,032
Stefan Simon on 11-05-2019 11:25 AM
1,122
Ofer_Shezaf on 11-05-2019 06:16 AM
1,884
Clive Watson on 11-04-2019 02:07 PM
2,331
Clive Watson on 11-01-2019 09:18 AM
2,041
Yaniv Shasha on 10-30-2019 01:17 AM
1,607
Ofer_Shezaf on 10-27-2019 05:44 AM
1,878
Ofer_Shezaf on 10-16-2019 11:15 PM
2,378
shainw on 10-15-2019 08:56 AM
1,999
Pete Bryan on 10-07-2019 10:00 AM
1,829
ianhelle on 09-30-2019 08:27 AM
3,451
Ofer_Shezaf on 09-24-2019 11:30 PM
2,460
Ofer_Shezaf on 09-19-2019 02:11 PM
2,168
Ofer_Shezaf on 09-18-2019 02:00 AM
11.2K
Tiander Turpijn on 08-31-2019 02:58 PM
3,002
Ofer_Shezaf on 08-19-2019 01:43 PM
3,564
Ofer_Shezaf on 08-13-2019 11:53 PM
2,597
Ofer_Shezaf on 08-07-2019 02:30 AM
4,289
Ashwin_Patil on 07-31-2019 07:45 AM
Latest Comments
In the code example where you are searching for "DLPRuleMatch" why do you do use where Operation contains "DLP" before where Operation == "DLPRuleMatch" ? Does that make the query faster?
0 Likes
Thanks @Gary Bushey! fixed. I really need to get an exception to run Grammarly in Chrome. Corporate policy does not allow me which means I am cutting and pasting parts back and forth, and those are the results :(
0 Likes
I think in the line "By setting the If the join and additional conditions return results, an alert is triggered. ", the first 3 words should not be there. This is in the 3rd paragraph under the Correlating using Joins header
0 Likes
@Thijs Lecomte : you can use ARM. See here and here.
2 Likes
Is there any way to easily deploy playbooks to different tenants at once? That way you can keep a baseline for all customers
0 Likes