Microsoft Sentinel SOC Operations

The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

A walkthrough of creating and using the Azure environment and Microsoft Sentinel to track attacks and plot attacks on a live map.

Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're diving into offensive strategies, mastering threat hunting, or bolstering your blue-team defenses, this repo has you covered.

This workspace contains all the code (ARM templates and PowerShell) referenced inside my Medium article about the Sentinel Workspace Manager.

Managing Microsoft Sentinel with Azure Lighthouse