The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

This guide takes you through the built-in security controls and the multi-layered security features offered by Azure to protect cloud workloads across apps and networks.

In this project I set up a Security Information and Event Management (SIEM) in Azure (Sentinel)

Data pump to pump Cisco AMP event stream to Azure Sentinel (Log Analytics)

A beginner-friendly project that demonstrates how to set up a Windows Server 2019 VM in Hyper-V, connect it to Azure using Azure Arc, and collect event logs into Microsoft Sentinel for security monitoring and analysis using KQL.