#sentinelsaturdays — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #sentinelsaturdays, aggregated by home.social.
-
Sentinel Saturday!
🏷️ Tag and Track Incidents with Custom Incident Labels
Keeping your SOC organised can be tough, especially when multiple analysts are tackling dozens of incidents at once or if you are managing an MSSP.
This week’s #SentinelSaturday covers how custom incident labels in Microsoft Sentinel can bring order to the chaos. From tracking investigation stages to grouping related threats, labels are a simple way to improve visibility, collaboration, and reporting.
👉 Check out the post, try adding meaningful labels to your own incidents, and see how it transforms your workflow. https://marshsecurity.org/sentinel-saturdays-tag-and-track-incidents-with-custom-incident-labels/
💬 How do you label and categorise incidents in your environment? Drop your ideas in the comments. Let’s share what works for our own environments!
🔁 If you find this helpful, give it a like or share it with your Sentinel team.
#MicrosoftSentinel #SentinelSaturdays #CyberSecurity #SOC #ThreatDetection #IncidentResponse #MicrosoftSecurity -
🕵️♂️ KQL is both a science and an art.
If you’ve ever felt your Sentinel queries were running slow or costing more than they should, you’re not alone.
This week’s #SentinelSaturdays covers how to write leaner, faster, more efficient KQL queries with practical examples you can use today.🔗 Read the full walkthrough here: https://marshsecurity.org/sentinel-skills-saturday-edition-one/
Share your comments 👇
What’s YOUR top KQL tip or favourite optimisation trick?Let’s build a thread of practical advice for the hunting community.
#MicrosoftSentinel #KQL #ThreatHunting #SecurityOperations -
🕵️♂️ KQL is both a science and an art.
If you’ve ever felt your Sentinel queries were running slow or costing more than they should, you’re not alone.
This week’s #SentinelSaturdays covers how to write leaner, faster, more efficient KQL queries with practical examples you can use today.🔗 Read the full walkthrough here: https://marshsecurity.org/sentinel-skills-saturday-edition-one/
Share your comments 👇
What’s YOUR top KQL tip or favourite optimisation trick?Let’s build a thread of practical advice for the hunting community.
#MicrosoftSentinel #KQL #ThreatHunting #SecurityOperations -
🕵️♂️ KQL is both a science and an art.
If you’ve ever felt your Sentinel queries were running slow or costing more than they should, you’re not alone.
This week’s #SentinelSaturdays covers how to write leaner, faster, more efficient KQL queries with practical examples you can use today.🔗 Read the full walkthrough here: https://marshsecurity.org/sentinel-skills-saturday-edition-one/
Share your comments 👇
What’s YOUR top KQL tip or favourite optimisation trick?Let’s build a thread of practical advice for the hunting community.
#MicrosoftSentinel #KQL #ThreatHunting #SecurityOperations -
🕵️♂️ KQL is both a science and an art.
If you’ve ever felt your Sentinel queries were running slow or costing more than they should, you’re not alone.
This week’s #SentinelSaturdays covers how to write leaner, faster, more efficient KQL queries with practical examples you can use today.🔗 Read the full walkthrough here: https://marshsecurity.org/sentinel-skills-saturday-edition-one/
Share your comments 👇
What’s YOUR top KQL tip or favourite optimisation trick?Let’s build a thread of practical advice for the hunting community.
#MicrosoftSentinel #KQL #ThreatHunting #SecurityOperations