azure-sentinel Image

azure-sentinel

This tag was merged into microsoft-sentinel
question
DavidBroggy-5270 avatar image
DavidBroggy-5270 asked JamesTran-MSFT commented

How do I get the o365 or mcas secure score for users into Sentinel?

azure-security-center microsoft-sentinel

0 Votes

0Answers

1 Comment

question
JonNaglieri-7226 avatar image
JonNaglieri-7226 asked JamesTran-MSFT commented

Default Okta Workbook Template show errors: Request is invalid and cannot be processed: Syntax error: Query could not be parsed: SYN0001: I could not parse that, sorry. [line:position=0:0].

microsoft-sentinel

This question has an accepted answer. Accepted

0 Votes

1Answer

1 Comment

question
EwanChalmers-6599 avatar image
EwanChalmers-6599 asked JamesTran-MSFT commented

Problems with combining logical expressions in Sentinel Incident API $filter

microsoft-sentinel

0 Votes

1Answer

4 Comments

question
MalhotraGurupreetSingh-8430 avatar image
MalhotraGurupreetSingh-8430 asked MarileeTurscak-MSFT answered

No incident triggered in Azure Sentinel

microsoft-sentinel

0 Votes

1Answer

0 Comments

question
Rohit-3772 avatar image
Rohit-3772 asked JasonSmyth-2826 answered

Azure Sentinel

microsoft-sentinel

0 Votes

1Answer

1 Comment

question
jcna avatar image
jcna asked jcna answered

Azure Sentinel Alert Queries to Slack

azure-logic-apps microsoft-sentinel

0 Votes

3Answers

2 Comments

question
MarianaWolter-1171 avatar image
MarianaWolter-1171 asked MarianaWolter-1171 commented

Custom rule triggered but need to refresh event query multiple times to get results

microsoft-sentinel

0 Votes

0Answers

4 Comments

question
AvisaNaresh-6433 avatar image
AvisaNaresh-6433 asked vipulsparsh-MSFT commented

unable to regenarate the primary and secondry keys for log analytic workspace

microsoft-sentinel

0 Votes

1Answer

0 Comments

question
ChrisSmith-6811 avatar image
ChrisSmith-6811 asked JamesTran-MSFT commented

Cross workspace incident and events/investigation links

microsoft-sentinel

0 Votes

0Answers

1 Comment

question
PaoloTibberio-9786 avatar image
PaoloTibberio-9786 asked MarileeTurscak-MSFT commented

Sentinel detection rule

microsoft-sentinel

0 Votes

0Answers

3 Comments

question
OdedNavon-3142 avatar image
OdedNavon-3142 asked JamesTran-MSFT commented

create make-series from a function output

microsoft-sentinel

0 Votes

0Answers

1 Comment

question
TheGregle avatar image
TheGregle asked MarileeTurscak-MSFT answered

Risky user activity not showing in MCAS

microsoft-sentinel

0 Votes

1Answer

0 Comments

question
Eduards-6654 avatar image
Eduards-6654 asked Eduards-6654 answered

Azure Sentinel - Syslog log filtering on VM

microsoft-sentinel

0 Votes

2Answers

0 Comments

question
ChristopherSomers-1442 avatar image
ChristopherSomers-1442 asked JamesTran-MSFT commented

new azure tenant not recognising global admin for sentinel connector

azure-active-directory microsoft-sentinel

This question has an accepted answer. Accepted

0 Votes

1Answer

0 Comments

question
Eduards-6654 avatar image
Eduards-6654 asked Eduards-6654 commented

Azure Sentinel - IIS brute force tracking

microsoft-sentinel

This question has an accepted answer. Accepted

0 Votes

1Answer

0 Comments

468 Posts
243 Users
51 Followers