Category Logs

10/10/2023

Navigating the SC-200 Exam: Your Comprehensive Guide

By Stephen Hackers in Alerts, Alerts, Azure AD, Azure Monitor, Azure Security, Conditional Access, Enterprise Security, IAM, Identity and Services, Identity Protection, Key Vault, Logs, Microsoft, Microsoft Azure, Networks, Roles, Users and Groups, Security & Compliance, Security Center Tag Analyst, Certification, Exam, Microsoft, Microsoft 365, Microsoft Azure Security Technologies, Microsoft Purview, Microsoft Security, Operations, Prep, SC-200, Security, Study

Introduction: Gearing up for the SC-200 exam? Microsoft's SC-200 exam, also known as the Security Operations Analyst certification, is designed to validate your skills in managing security alerts, responding to…

26/07/2022

Microsoft SC-200 Security Operations Analyst – Study Notes

By Steve in Alerts, Alerts, Azure AD, Azure Monitor, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Externsions, IAM, Identity and Services, Key Vault, Logs, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Office365, Roles, Users and Groups, Security & Compliance, Security & Compliance, Security Center Tag Certification, Cyber, Exam, Exam Prep, Microsoft, SC-200, Security Analyst, Security Operations, Study Guide, Study Notes

Defender for Identity entity tags in Microsoft 365 Defender https://docs.microsoft.com/en-us/defender-for-identity/manage-sensitive-honeytoken-accounts Using role-based access control (RBAC) https://docs.microsoft.com/en-us/learn/modules/deploy-microsoft-defender-for-endpoints-environment/4-manage-access Manage portal access using role-based access control https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide Safe Attachments policies in Microsoft Defender…

22/06/2020

Microsoft Azure Security – Study Notes

By Steve in Advisor, Alerts, Alerts, App Service, Azure AD, Azure Container Registry, Azure Monitor, Azure Security, Blueprint, Cloud & Datacenter Management, Cloud Security, Conditional Access, Content Trust, Cyber Security, Enterprise Security, Enterprise Security, Externsions, Hot Wired IT Solutions, IAM, Identity Protection, Key Vault, Kubernetes, Logs, Management Locks, Microsoft, Microsoft Azure, Networks, Powershell, Roles, Users and Groups, Security & Compliance, Security Center, Storage Tag AZ-500, AZ500, Azure, Azure Security, Exam, Microsoft, Microsoft Azure Security Technologies, Prep, Study Notes

A collection of all my study notes and lab work while working towards passing the badge Microsoft Certified Security Engineer Associate by passing the AZ-500 exam These notes are in…

15/06/2020

Office 365 Security and Compliance – Alert When A Specific File Is Accessed

By Steve in Alerts, Alerts, Azure Security, Cloud & Datacenter Management, Enterprise Security, Logs, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, OneDrive, Security & Compliance, Security & Compliance, Security Center Tag Actions, Active, Alert, Alerts, Azure Security, Dismissed, File, File Accessed, File Activity, File Modified, File Opened, Information Governance, Investigating, Investigation, Microsoft 365, Monitor, Notifications, Office365, Resolved, Security And Compliance

When a very important file stored in OneDrive needs to be monitored. This is how to create an alert on file activity. We specifically want to monitor and alert on…

15/06/2020

Content Search – Security And Compliance – Search A Mailbox For Specific Content And Then Export Results

By Steve in Alerts, Alerts, Azure Security, Cloud & Datacenter Management, Enterprise Security, Exchange, Logs, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Security & Compliance, Security & Compliance, Security Center Tag Azure Security, Compliance, Compliance.microsoft, Content Search, Export, Investigation, Mailbox, New Search, Search, Security, Security And Compliance, specific word

If you’re doing some compliance investigation work, you may need to search a user’s mailbox for specific words. This is how To Search Email Content in Office 365 Security &…

22/05/2020

Azure – Log Analytics Workspace and AzureVirtual Machine Agent Install

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Analytics, Azure, Azure Security, Collect, Event Logs, Log, Logs, Security Logs, Virtual Machines, Windows, Workspace

How to prepare to collect security log data from your Azure Windows virtual machines. You require two things: Log Analystics Workspace to be created The agent to be installed on…

21/05/2020

Azure – Update Management

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Update Management, WSUS Tag Azure, Azure Security, Linux, Patch Management, Update Management, Virtual Machines, Windows, Windows Updates

How to maintain the patch status of your Windows and Linux machines "You can use Update Management in Azure Automation to manage operating system updates for your Windows and Linux…

20/05/2020

Azure – Activity Log

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Activity, Activity Log, Azure, Azure Security, CSV, Diagnostics, Export, Filter, Log, Logs, Name, Operation, Status, Subscription, Time

Example of what you can see in an Azure Activity Log Event Initiated by Subscription Operation Status Time

16/01/2020

AZ-103: Microsoft Azure Administrator – EXAM PASSED!!!

By Steve in Active Directory, Alerts, Azure AD, Azure Monitor, Cloud & Datacenter Management, Conditional Access, Enterprise Security, Hot Wired IT Solutions, Kubernetes, Logs, Microsoft, Microsoft Azure, Networks, Roles, Users and Groups, Security Center, Storage Tag Administrator, AZ-103, AZ103, Azure, Certified, Microsoft, Professional

Jan 16, 2020 AZ-103: Microsoft Azure ADMINISTRATOR EXAM PASSED!!! #Azure #Administrator #CertifiedProfessional #MicrosoftAzure #MicrosoftCloud #Microsoft #alwaysbelearning #AZ103 #EXAM #PASSED