365
544
2,802
1,176
742
2,688
1,452
2,580
2,567
2,722
2,143
2,367
1,372
2,034
2,829
4,568
1,912
6,378
4,446
Nodrog
in
Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2
on
08-14-2019
Ah I see. So why can't Sentinel use LinuxAudit? Sorry if this is the
wrong place to ask but I'm trying to get LinuxAudit working at the
moment and the data doesn't seem to show up in the workspace.I wasn't
sure if it had been silently retired or something. I've had a support
request open for a while...
0 Likes
ianhelle
in
Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2
on
08-14-2019
@Nodrog Yep. Russell (author of the blog) is in the same team as me and
I have been working with the OMS auditd data for a while in Azure
Security Center. Unfortunately, this isn't yet there in the Azure
Sentinel implementation - so this is a kind of stop-gap until it
arrives. More generally though,...
0 Likes
Nodrog
in
Security Investigation with Azure Sentinel and Jupyter Notebooks – Part 2
on
08-14-2019
So why do you need to import it as a custom log?The omsagent is supposed
to support auditd through the auoms extension. Here's a blog post about
it
0 Likes
Yuri Diogenes
in
Integrating Azure Security Center with Azure Sentinel
on
07-30-2019
Hello @oshrih7145 Recently we announced Azure Lighthouse (see
https://docs.microsoft.com/en-us/azure/lighthouse/concepts/cross-tenant-management-experience
for more info), and this enables Azure Sentinel for the multi-tenant
scenario.
0 Likes
oshrih7145
in
Integrating Azure Security Center with Azure Sentinel
on
07-27-2019
helloIs it possible to connect azure sentinel for multiple azure ad
tenants, so we can control and audit a different directory, which is not
under the tenanted generated by sentinel workspace ?
0 Likes