Monitoring Zoom with Azure Sentinel
One of the great features of Azure Sentinel is its ability to ingest and analyze data from any source not just from Microsoft products. In this blog will show you how you can collect logs from Zoom, ingest them into Azure Sentinel, and how a SOC team can start to hunt in the logs to find potentially malicious activity.
Hunting Threats on Linux with Azure Sentinel
In this blog post, we will cover how to:
- Install the OMS (Operations Management Suite) agent that Azure Sentinel will use to collect the syslog
- Install the MSTIC-Research branch of AUOMS
- Configure Azure Sentinel to collect the events
- Build useful functions in Azure Sentinel to aid threat hunting
I hope that you will enjoy the read!
