Home / Stories / Topic

Microsoft Sentinel

Topic • 5 Stories

Related: KQL Cloud Security Azure DevSecOps Entra ID AI Security Threat Hunting DeviceProcessEvents

Dikshant Lather · Sep 25, 2026

Detecting Brute Force Attacks Followed by Successful Logon in Microsoft Sentinel

Correlate failed sign-ins followed by a successful authentication within a short time window to immediately flag compromised user accounts.

Incident Response 2 min read

0 0

Detecting Brute Force Attacks Followed by Successful Logon in Microsoft Sentinel

Dikshant Lather · Sep 25, 2026

Detect Password Spray Attacks in Microsoft Entra ID Using KQL

Learn how to detect distributed password spray attacks targeting Microsoft Entra ID using advanced KQL queries, threshold aggregation, and IP failure rate analysis.

Identity Security 2 min read

0 0

Detect Password Spray Attacks in Microsoft Entra ID Using KQL

Dikshant Lather · Sep 25, 2026

Hunting for Impossible Travel and Anomalous Token Sign-Ins in Sentinel

Detect geographic anomalies, session cookie theft, and impossible travel patterns across cloud user logins using geospatial distance calculation functions in KQL.

Identity Security 2 min read

0 0

Hunting for Impossible Travel and Anomalous Token Sign-Ins in Sentinel

Dikshant Lather · Sep 24, 2026

How to Send AWS CloudTrail Logs to Microsoft Sentinel

Build a practical AWS-to-Sentinel logging path for centralized cloud detection, investigation, and incident response.

cloud-security 1 min read

0 0

How to Send AWS CloudTrail Logs to Microsoft Sentinel

Dikshant Lather · Sep 24, 2026

How to Detect Suspicious AWS IAM Activity with Microsoft Sentinel

Create Sentinel detections for suspicious AWS IAM changes, access keys, privilege escalation, trust relationships, and logging manipulation.

cloud-security 1 min read

0 0

How to Detect Suspicious AWS IAM Activity with Microsoft Sentinel