Microsoft's Sysmon and Azure Sentinel are easy and inexpensive ways to log events on your network. Here's how to get started with them. Logging is the key to knowing how the attackers came in and how ...

We've all seen this before, and with the newest cloud platforms, we need to think about housecleaning. I can distinctly remember cleaning up file shares 15 years ago. I also remember (and still find ...

One year on from reaching general availability, Microsoft's Azure-based Sentinel security system now brings new user and entity behavioral analytics to help detect unknown and insider threats faster.

The Cybersecurity and Infrastructure Security Agency (CISA) has released a PowerShell-based tool that helps detect potentially compromised applications and accounts in Azure/Microsoft 365 environments ...

Microsoft announced the addition of an Azure Active Directory (AD) sign-in history feature that would allow users to get an overview of past sign-ins and quickly detect any unusual login activity.

Azure Blob Storage is a high-value target for threat actors due to its critical role in storing and managing massive amounts ...