Microsoft's Sysmon and Azure Sentinel are easy and inexpensive ways to log events on your network. Here's how to get started with them. Logging is the key to knowing how the attackers came in and how ...

The Activity Logs feature of Azure Active Directory is now integrated with Azure Monitor, according to a Microsoft announcement on Tuesday. The ability to access those logs in Azure Monitor is now at ...

We've all seen this before, and with the newest cloud platforms, we need to think about housecleaning. I can distinctly remember cleaning up file shares 15 years ago. I also remember (and still find ...

A Chinese hacker’s intrusion though a US government Microsoft 365 account is a wake-up call to review your current logging stance. Sandwiched into the same day that Microsoft announced the rebranding ...

The Cybersecurity and Infrastructure Security Agency (CISA) has released a PowerShell-based tool that helps detect potentially compromised applications and accounts in Azure/Microsoft 365 environments ...