Microsoft's Sysmon and Azure Sentinel are easy and inexpensive ways to log events on your network. Here's how to get started with them. Logging is the key to knowing how the attackers came in and how ...

As infrastructures get ever more complex, managing security becomes a significant issue. Alerts and logs are coming from many different systems, in as many different formats, and it’s important that ...

Microsoft today took Azure Sentinel out of public preview and into general availability, making it an official Azure service. With Azure Sentinel, Microsoft has now officially entered the SIEM market.

My business has been providing IT services to SMBs since 1998 so I know the challenges and limitations of the "smaller end of town" intimately. The move to cloud is completed for most of my clients, ...

Doug Bonderud is an award-winning writer capable of bridging the gap between complex and conversational across technology, innovation and the human condition. Having more players in the marketplace ...

Microsoft has unveiled a new ransomware detection feature for its Azure customers that will send alerts to security teams when the system observes actions "potentially associated with ransomware ...

Microsoft is launching what it's calling the first SIEM (security information and event management) tool that is native to a major cloud platform. The offering, Azure Sentinel, aims to stand out from ...

In preview since February, Microsoft's cloud-based security information and event management (SIEM) solution became generally available this week. Azure Sentinel's launch comes after months of ...

Paul Schnackenburg takes a look at the public preview of the new Microsoft cloud-based Security Information and Event Management service. In February 2019 Microsoft announced a new service called ...

Microsoft Sentinel now comes with support for continuous GitHub threat monitoring, which helps keep track of potentially malicious events after ingesting GitHub enterprise repository logs. Microsoft ...