Author: Mike Taylor
-
đ§ Security Copilot Agents: How They Work to Amplify Security
Security Copilot by Microsoft is ushering in a new era of AI-assisted security operations. Whether you’re a SOC analyst overwhelmed with alerts or a security leader looking to maximize efficiency, Security Copilot provides a unified AI interface that acts like a trusted co-pilot. At the core of this AI-driven experience are security copilot agentsâmodular, intelligent… Read more
-
đĄď¸Â Commanding the Chaos: Lifting Off with Microsoft Security Copilot
đ Welcome to Our Security Copilot Blog Series! Weâre excited to launch Commanding the Chaos, a 6-week blog series designed to help you unlock the full potential of Microsoft Security Copilot. Whether you’re a seasoned security analyst, a cloud architect, or just beginning your cybersecurity journey, this series will guide you through the tools, techniques, and strategies… Read more
-
How to Create Custom Sentinel Analytic Rules
By Mike â Security Day Blog – This post will explain the importance of developing Sentinel rules for modern security systems. đ Introduction: Sentinel Rule Building Can Be ToughâHereâs How I Make It Easier Letâs be realâbuilding custom detection rules isnât always easy. There are days when everything clicks and the logic comes together fast.… Read more
-
Exploit SIEM Synergy: Supercharge Azure Sentinel Now
Introduction In todayâs sprawling security ecosystems, many organizations run parallel SIEMs. They use a legacy platform to handle traditional infrastructure. Alongside this, they use Microsoft Sentinel to watch cloud-native workloads. The challenge? Making these systems talk to each other effectively. This post shows how to ingest alerts from third-party SIEM platforms into Microsoft Sentinel. More… Read more
-
The Unfiltered Truth: How to Slash Sentinel Costs by Curating Log Chaos
Drowning in logs? Youâre not alone. When on-premise systems spew unfiltered telemetry into Microsoft Sentinel, you end up with bloated dashboards, noisy detections, and a hemorrhaging Azure bill. This guide is your antidote: a meticulous blueprint for curating log data â turning a chaotic flood into a lean, incisive signal stream that tells a story… Read more
-
Demystifying Uncommon Log Sources into Microsoft Sentinel: What You Need to Know (with Real Client Examples + Code)
Microsoft Sentinel provides native connectors for many popular services. However, when your environment includes custom-built applications, legacy systems, or niche appliances, youâll often need to step outside of the out-of-the-box options. Ingesting uncommon log sources is essential for achieving complete visibility across your environment. Fortunately, with the right approach, it’s absolutely achievable. In this post,… Read more
-
Why Microsoft Sentinel Complements Your Current SIEM
Client Security teams often ask me the same question when Microsoft Sentinel comes up: âWhy would we use Sentinel? We already have a SIEM.â It’s a fair questionâespecially if your current SIEM has been in place for years, integrated into your workflows, and tuned to your environment. But hereâs the critical truth: Microsoft Sentinel isnât… Read more
-
What to Focus on First with Microsoft Sentinel
Mike! Mike! Mike! What day is it? Its Security with Mike! One of the most critical components of any security organization is a functional SIEMâone that delivers the visibility, threat detection, and response capabilities your organization needs. Without proper planning, a SIEM can quickly become a costly, ineffective log repository instead of a powerful security… Read more