We launched the Microsoft Sentinel Hackathon Spring 2022 couple of months ago; we challenged security experts around the globe to build end-to-end cybersecurity solutions for Microsoft Sentinel that provides enterprise value and they delivered!
We are thrilled to receive a diverse set of submissions that deliver end-to-end enterprise value by collecting data, detecting, hunting, investigating, and responding to cybersecurity threats. It’s truly inspiring to see the immense creativity and effort that participants put into their solutions. Please join us in congratulating the winners of the Microsoft Sentinel Hackathon Spring 2022.
First place: Rumble Network Discovery solution for Microsoft Sentinel
Rumble Network Discovery solution is a network domain solution from Josh Lucas that enables enterprises to enrich their Microsoft Sentinel incidents with an export of asset information and receive alerts when new assets are discovered on the network or high value assets are modified.
“Today’s threat landscape requires that customers deploy intelligent solutions at speed and scale. The Rumble Network Discovery solution offers deep Microsoft Sentinel integration with rich analytics, providing customers with new capabilities and enabling them to realize value faster. Its completeness makes the solution a standout amongst the hackathon competition.”, said Ann Johnson, Corporate Vice President, SCI BD, Microsoft.
Rumble Network Discovery solution for Microsoft Sentinel
Second Place: PaloAlto - Cortex XDR integration with Microsoft Sentinel
The Palo Alto Cortex XDR solution for Microsoft Sentinel, by Krishnan Kartik, Santosh Kumar and Vikas Chaturvedi from Inspira, gives customers the ability to get audit logs and incidents from Cortex XDR and provides data enrichment, visualization, and automated incident response with SOAR capabilities in Microsoft Sentinel. Check out this solution at PaloAlto - Cortex XDR integration with Microsoft Sentinel | Devpost
“Shows how to use Sentinel's orchestration abilities on XDR data”, said John Lambert, Distinguished Engineer, and General Manager, MSTIC, Microsoft.
PaloAlto - Cortex XDR integration with Microsoft Sentinel
Runners Up #1: Monitoring CSGO Server with Sentinel
CS:GO server hosts can use this solution by Teemu Rasanen and Joel Kataja, to monitor their servers in real-time for different in-game events, for example to get alerts of potential cheaters on their servers. Take a look at this solution at Monitoring CSGO Server with Sentinel | Devpost
“Security innovation in gaming can help address issues that persist in the industry. The gaming server monitoring capability with Microsoft Sentinel is completely novel and unique, helping enterprise organizations on an issue for which there is no elegant solution today”, said Ann Johnson.
Monitoring CSGO Server with Sentinel
Runners Up #2: DocuSign Monitor Solution
The DocuSign Monitor solution for Microsoft Sentinel by Aaron Hoffmann, is a SaaS-application domain solution that enables organizations to gain better visibility into their DocuSign organization and accounts and receive security alerts from DocuSign Monitor in Microsoft Sentinel. Take a look at this solution at DocuSign Monitor Solution | Devpost
“Useful implementation of monitoring a SAAS solution. Well documented and ready to run.”, said Olaf Hartong, Defensive Specialist and Security Researcher, FalconForce & Microsoft MVP.
DocuSign Monitor Solution
Popular Choice: Manage secure multi cloud environment with Sentinel
Manage secure multi-cloud environment with Sentinel by Pham Tung Duong and Hieu Tran, is an end-to-end security solution to leverage Microsoft Sentinel as a core component for a secure multi cloud environment. This solution uses Sentinel to collect security findings in some AWS security services by using S3 bucket for log integration for an AWS native approach. Take a look at the solution at Manage secure multi cloud environment with Sentinel | Devpost
Manage secure multi cloud environment with Sentinel
Again, congratulations to the winners and huge thanks to all the hackathon participants. We also wanted to take a moment to thank our all-star panel of judges for taking time out of their busy schedules to review and provide feedback on all the submissions. Many thanks to Ann Johnson, John Lambert, and Olaf Hartong for their support.
Hopefully this Hackathon has inspired you to be a member of the Microsoft Sentinel Threat Hunters community. Get started now by joining the Threat Hunters GitHub community and follow the guidance. Let us know your feedback using any of the channels listed in the Resources.