Bicep is becoming a popular way of deploying Microsoft Sentinel. This article will show how this can be done as well as deploying solutions from the Content Hub and Analytic Rules.

Learn how to reduce your data volume while also collecting the information with the highest security/detective value to your org.

Several Sentinel users raised the alarm that several of the data connectors they were using suddenly show as deprecated in the user interface.

Honeypot: Honeypot is a security mechanism designed to attract, detect, and analyze malicious activities and attackers by simulating a vulnerable system or network service. The primary purpose of a...

We would like to provide new update on AiTM (Adversary-in-the-Middle) phishing attacks hunting query with the Unified Security Operations Platform. These queries are revised versions from the blog po...

Although Defender for Endpoint (MDE) consists of various protections against tampering and of alerts to detect it, adversaries are constantly trying to find a way to successfully circumvent and termi...

PowerShell is a great tool for administrators to manage devices and servers in their environment. When using it to administer remote systems with PSRemoting, you don’t leave credentials behind on the...