Azure Sentinel
Copied!
Home
Options
1,506
Ofer_Shezaf on 12-04-2019 05:27 PM
6,711
Pete Bryan on 12-04-2019 03:26 AM
1,484
Alp Babayigit on 11-25-2019 11:22 AM
2,160
Ofer_Shezaf on 11-25-2019 01:57 AM
5,497
Ashwin_Patil on 11-20-2019 07:00 AM
6,056
Cristhofer Munoz on 11-19-2019 06:12 AM
9,616
Ashwin_Patil on 11-18-2019 07:00 AM
1,758
Sarah Fender on 11-13-2019 09:41 AM
5,313
Amar Patel (C AND E) on 11-11-2019 09:52 AM
1,248
Clive Watson on 11-11-2019 03:03 AM
1,361
Alex_Karabasevic on 11-07-2019 01:07 PM
2,141
Stefan Simon on 11-05-2019 11:25 AM
1,186
Ofer_Shezaf on 11-05-2019 06:16 AM
1,944
Clive Watson on 11-04-2019 02:07 PM
2,402
Clive Watson on 11-01-2019 09:18 AM
2,102
Yaniv Shasha on 10-30-2019 01:17 AM
1,647
Ofer_Shezaf on 10-27-2019 05:44 AM
1,926
Ofer_Shezaf on 10-16-2019 11:15 PM
2,429
shainw on 10-15-2019 08:56 AM
2,031
Pete Bryan on 10-07-2019 10:00 AM
1,886
ianhelle on 09-30-2019 08:27 AM
3,493
Ofer_Shezaf on 09-24-2019 11:30 PM
2,583
Ofer_Shezaf on 09-19-2019 02:11 PM
2,200
Ofer_Shezaf on 09-18-2019 02:00 AM
11.4K
Tiander Turpijn on 08-31-2019 02:58 PM
3,091
Ofer_Shezaf on 08-19-2019 01:43 PM
3,950
Ofer_Shezaf on 08-13-2019 11:53 PM
2,687
Ofer_Shezaf on 08-07-2019 02:30 AM
4,334
Ashwin_Patil on 07-31-2019 07:45 AM
Latest Comments
Thanks @cteodor . the screenshots should show cloudgoat profile as i am using it, i have edited article with the correct screenshots.
0 Likes
Uhm, on step 2 you did aws configure --profile cloudgoat but later on after "verify that config and credential files are correctly populated" we can see only [default], are you using the profile or the default settings?
0 Likes
In the code example where you are searching for "DLPRuleMatch" why do you do use where Operation contains "DLP" before where Operation == "DLPRuleMatch" ? Does that make the query faster?
0 Likes
Thanks @Gary Bushey! fixed. I really need to get an exception to run Grammarly in Chrome. Corporate policy does not allow me which means I am cutting and pasting parts back and forth, and those are the results :(
0 Likes
I think in the line "By setting the If the join and additional conditions return results, an alert is triggered. ", the first 3 words should not be there. This is in the 3rd paragraph under the Correlating using Joins header
0 Likes