Samilamppu.com

Microsoft Sentinel Data Connectors Health – Deep Dive

WEBIn the last year, I wrote how to Monitor Microsoft Sentinel data connectors' health by leveraging native Microsoft solutions. This blog post is an updated version of …

Actived: 6 days ago

URL: https://samilamppu.com/2022/09/14/microsoft-sentinel-data-connectors-health-deep-dive/

Monitor Azure Sentinel Data Connectors Health – Sam's Corner

WEBPublished by Sami Lamppu. Monitoring Azure Sentinel data connectors health is crucial to keep your environment secure. There are many different angles in …

Category:  Health Go Health

How To Fix – Azure AD Connect Health Status – Unmonitored

WEBAzure AD Connect Health is very useful monitoring tool which provides monitoring capabilities for Azure AD Connect sync engine, Active Directory Federation …

Category:  Health Go Health

Insights of Defender for Cloud Apps Data Connector

WEBThe reason for this is the ‘M365 Defender’ data connector. If you have connected ‘M365 Defender’ data connector enabled bi-directional sync is enabled …

Category:  Health Go Health

Use Azure AD Insights & Workbooks for Monitoring – Sam's Corner

WEBBefore summer Microsoft launched new Azure AD monitoring capabilities, “Workbooks” and “Usage & Insights” which are visible at the Azure AD portal. In this …

Category:  Health Go Health

Auditing Azure AD Diagnostics Setting Changes – Sam's Corner

WEBImagine a scenario where you have Azure Sentinel (or 3rd party SIEM) deployed and it creates alerts/incidents based on the analytic rules. A bad actor get …

Category:  Health Go Health

How To Remove Permissions From Azure Root Management Group

WEBUPDATE 01/21/2021 – When the toggle is turned from Yes to No, the permissions are removed. This behavior has been changed since last year when the …

Category:  Health Go Health

AAD Connect Device Writeback Feature – Sam's Corner

WEB5. Configure AAD Connect with wizard to allow “Device Write-Back”. 6. If you are using OU based scoping confirm that “Registered Devices” container is selected …

Category:  Health Go Health

Azure Activity Log Export and Journey of Log Analytics Legacy Log

WEBAzure Activity Log is one of the core log sources to ingest in the Microsoft ecosystem to SIEM (such as Microsoft Sentinel). According to Microsoft: “It’s a …

Category:  Health Go Health

Integration With Microsoft Defender ATP

WEBIn the last year, I wrote three blog posts related to Microsoft Cloud App Security (MCAS) monitoring part. In those posts I haven't touched the activity part …

Category:  Health Go Health

Sam's Corner – Site about cloud security

WEBAzure AD Identity Protection Integrations with Microsoft Security Solutions. November 22, 2022 — 2 Comments. Azure Active Directory - AAD, Defender for Cloud Apps, M365 …

Category:  Health Go Health

Upgrading AD DS Schema to Windows Server 2016

WEBThere aren’t any significant changes when upgrading Active Directory Domain Services from Windows Server 2012 R2 to Windows Server 2016 level. Here is a …

Category:  Health Go Health

Changing ADFS certificates – Token-Signing and Token-Decrypting

WEBIf you are utilizing the AutoCertificateRollover feature of AD FS 2.0,2.1 or 3.0, you do not need to manually replace the Token-Signing certificate. …

Category:  Health Go Health

Error in W2016 ADFS farm Synthetic Transactions – Sam's Corner

WEBAzure AD Connect Health for AD FS generates this alert when the Health Agent installed on an AD FS server fails to obtain a token as part of a synthetic …

Category:  Health Go Health

Changing ADFS certificates – Service Communications (SSL)

WEBIn the Connections pane on the left, expand your server name, expand Sites and select the site used by ADFS ( Default: Default Web Site) Right-click on the site …

Category:  Health Go Health

Office 365 Audit Events – Visibility In Cloud App Security

WEBBefore jumping to the audited activities the key takeaway is: Cloud App Security integrates directly with Office 365’s audit logs and receives all audited events …

Category:  Health Go Health

How To Fix W10 On-Premises AD Domain Join Error Code 1003

WEBDelete all the metadata. Confirmation that you really want to delete a global catalog server. I also changed FSMORoleOwner attribute for DNS partitions that had …

Category:  Health Go Health

Azure Disk Encryption (ADE) with BYOK – Sam's Corner

WEBDisk encryption is using industry standard Bitlocker feature and the DM-Crypt feature to Linux toprovide volume encryption for the OS and data disks. This …

Category:  Health Go Health

Upgrade ADDS Schema to Windows Server 2019 – Sam's Corner

WEB88. 2019. Performing ADDS Schema update. My own guidelines to perform schema update are below. If I have possibility and time to perform ADDS forest recovery …

Category:  Health Go Health