New Blog Post | Watching the Watchers: Monitoring Microsoft Sentinel Repositories Activity

Microsoft

AshleyMartin_0-1650999809098.png

Watching the Watchers: Monitoring Microsoft Sentinel Repositories Activity - Azure Cloud & AI Domain...

 

If you’ve not used the Repositories feature of Microsoft Sentinel and you have need to deploy content like rules, workbooks, etc., you should give it a try. It’s a powerful tool to enable you to deploy a uniform set of content to your own Sentinel environment or others in other tenants or workspaces that you manage.

 

For example, just dropping a JSON file (deployment template) full of new Analytics Rules in my own GitHub repository causes them to show up almost immediately in my Microsoft Sentinel environment. Pretty slick! And, as this feature continues to improve, expect to see a lot of additional goodness come to it.

0 Replies