by Jesper Kråkhede, Sweden
Posted in Security Architecture, Security metrics, Technology on Mar 3rd, 2023
I have been asked many times which network logs are worth putting into a SIEM. After many incidents, here is my short list, together with what Microsoft recommends for Sentinel. The useful ones. Logs from the internet edge, especially outbound connections and what was denied. They show command and control traffic and data leaving. DNS […]
Active Directory AI AI agents AI governance Automation Business Cloud security Compliance Cost Credential Theft Data protection Detection Device management Governance Identity Incident response Information classification Legacy Logging Methodology Microsoft Microsoft Defender Microsoft Digital Defense Report Microsoft Sentinel Organisation OT Patching PAW Personal Privileged access Ransomware Remote access Remote work Risk management Security Architecture Security strategy Service Providers SOC SPA Statistics Supply chain Threat intelligence VPN Vulnerabilities Zero Trust