Log Analytics Workspace

Filter by
Categories
Tags
Authors
Show all

All
Azure App Service
Azure Architecture
Azure Blog
Azure Retirements
Azure Updates
Command Line
Community
Microsoft News
Microsoft Security
Tech Community

All
.NET
.NET Core
Active Directory Domain Services
Advancing reliability
Adversary-in-the-middle (AiTM)
Agentic AI
AI
AI + Machine Learning
ai assitant
ai foundry
ai studio
AIOps
AKS
alm
AMA
AML
analytics
Analytics and Big Data
Annual Channel
Annual Shareholders Meeting
AOAI
API Management
apim
apiops
APIs
App Configuration
app service
Apple Business Manager
Application Gateway
Arc Jumpstart
Artificial Intelligence
ASP.NET Core
Audio Notes
authentication
authenticator-apps
authorization
Auto Mode
automation
Automation Account
AVD
AVD Optimization
AVD Setup
AVD Storage Optimization
AVM
avnm
aws
AZ Files
AZ-900
Azure
Azure 2025 Update
Azure Access Control
Azure Action Groups
Azure Active Directory
Azure AD
Azure Adaptive Cloud
Azure Admin Guide
Azure Administration
Azure Admins
azure adoption
azure advisor
Azure AI
Azure AI Language
Azure AI Speech
azure ai studio
Azure ai-services
Azure Alerts
Azure Archive Storage
Azure Automanage
Azure Automation
Azure Backup
Azure Bastion
Azure Best Practices
Azure Bicep
Azure Billing Models
Azure Blob
Azure Blob Storage
Azure Blob vs File Storage
Azure Built-In Security
Azure Cache for Redis
Azure Chaos Studio
Azure Cloud
Azure Cloud Architect
Azure Cloud Computing
Azure Cloud Management
Azure Cloud Security
Azure Cloud Tutorial
Azure Compute Fleet
Azure Conditional Access
Azure confidential ledger
Azure Configuration Tutorial
Azure Container Apps
Azure Container Instances
Azure Container Registry
Azure Container Storage
azure copilot
Azure Cosmos DB
Azure Data Box
Azure Data Explorer
Azure Data Factory
Azure Data Lake Storage
Azure Data Management
Azure Database for MySQL
Azure Database for PostgreSQL
Azure Databricks
Azure Demo
Azure Deployment Environments
Azure DevOps
Azure DevOps Repository
Azure DevTest Labs
Azure Disk Storage
Azure DNS
Azure Dynamic Alerts
Azure Edition
Azure Elastic SAN
Azure Enterprise Applications
Azure Entra ID
azure essentials
Azure Essentials Show
Azure ExpressRoute
Azure File Share
Azure File Share Best Practices
Azure File Share Configuration
Azure File Share Explained
Azure File Share Metrics
Azure File Share Optimization
Azure File Share Performance
Azure File Shares
Azure File Storage
Azure File Storage Comparison
Azure File Storage Pricing
Azure Files
Azure Files Demo
Azure Firewall
Azure Firewall Manager
azure firewall policy
Azure Front Door
Azure Functions
Azure Functions Flex Comsumption
Azure Global
Azure Governance
Azure HDInsight on Azure Kubernetes Service (AKS)
Azure Health Data Services
Azure Hybrid Identity
Azure Image Builder
Azure Internet Access
Azure IoT Edge
Azure IP Addressing
Azure Key Vault
Azure Kubernetes Fleet Manager
Azure Kubernetes Service
Azure Kubernetes Service (AKS)
Azure Load Balancer
Azure Load Testing
Azure Local
Azure Log Analytics
Azure Logic App
Azure Logic Apps
Azure Machine Learning
azure management
Azure Maps
Azure Marketplace
Azure Metrics
Azure Migrate
Azure Monitor
Azure Monitor Agent
Azure NAT Gateway
Azure NAT Gateway Tutorial
Azure NetApp Files
Azure Network Security
Azure Networking
azure networking ai
Azure Networking Configuration
azure networking tutorial
Azure Open Source
azure openai
azure openai service
Azure Performance Monitoring
Azure Performance Optimization
Azure Policy
Azure Portal
Azure Portal Tutorial
Azure PowerShell
Azure Private Access
Azure Private Applications
Azure Private Endpoint
Azure Private Link
Azure Private Link Service
Azure Private Networking
Azure Private Subnets
Azure Profile Management
azure rbac
Azure Red Hat OpenShift
Azure Resource Graph
Azure Resource Group
Azure Resource Locks
Azure Resource Manager
azure routing
Azure Secure Connectivity
Azure Security
Azure Security Best Practices
Azure Sentinel
Azure SignalR Service
Azure Site Recovery
Azure Skill Sprint
Azure Sphere
Azure Spot Virtual Machines
Azure Spring Apps
Azure SQL
Azure SQL Database
Azure SQL DB
Azure SQL Edge
Azure SQL Managed Instance
Azure Stack
Azure Stack HCI
Azure Static Alerts
Azure Step-by-Step
Azure Step-by-Step Guide
Azure Storage
Azure Storage Access Tiers
Azure Storage Access Tiers Explained
azure storage account
Azure Storage Account Setup
Azure Storage Actions
Azure Storage Alerts
Azure Storage Best Practices
Azure Storage Cost Optimization
Azure Storage Cost Savings
Azure Storage Demo
Azure Storage IOPS
Azure Storage Monitoring
Azure Storage Mover
Azure Storage Pricing
Azure Storage Tips
Azure Storage Tutorial
Azure Stream Analytics
azure subnet
Azure Subnets
Azure Synapse Analytics
azure tips and tricks
Azure Traffic Forwarding
azure training
Azure Troubleshooting
Azure Tutorial
azure tutorial for beginners
Azure Tutorials
Azure Verified Modules
Azure Virtual Desktop
azure virtual machine
Azure Virtual Machines
Azure Virtual Network
azure virtual network manager
Azure Virtual Networks
Azure Virtual WAN
Azure VM
Azure VM Internet Access
Azure VM Security
Azure VMware Solution
Azure VNets
Azure VPN Alternative
Azure Web PubSub
Azure Well-Architected Framework
azure-ad-b2c
azure-arc
azure-b2c
azuredevops
azureopenai
AzureTutorial
backup
Batch
beginners
bgp
Bicep
biceplang
Blazor
Blizzard
blog
Book Review
Bot
branch
Branches
Bugs
Business
Business Intelligence
C#
CCAK
Certificate of Cloud Auditing Knowledge
certificates
Certification
Certifications
chargeback
CIFS
Cloud
Cloud Adoption Framework
Cloud Architect
Cloud Audit
Cloud Cultures
Cloud Foundation
Cloud Governance
Cloud Infrastructure
Cloud Mechanix
Cloud Native
Cloud Network Security
cloud networking
cloud security
Cloud Security Alliance
Cloud Services
Cloud Skills
Cloud Storage
Cloud Storage Tiers
cloud-computing
CloudFamily
CloudSecurity
Cmd
CNAPP
codegeneration
Command Line
Common Internet File System
community
Compliance
compute
Conditional Access
Conditional Access Policies
Conference
Configuration
containers
Content Delivery Network
copilot
copilot ai
copilot azure
cordon
Cost
cost-optimization
Course
credential theft
csharp
custom-policies
Cyber Security
Cybersecurity
CyberSecurity Certifications
Data Protection
Databases
Default Outbound Access
Defender EASM
delete
dependabot
Developer Life
Developer Tools
Development
devops
DevSecOps
dns
Document Summarisation
dotnet
EASM
Edge
EF Core
EKS
Elastic Search
enterprise
Enterprise File Sharing
Entity Behavior
entra
Entra Configuration
Entra DS AD DS
Entra Global Secure Access
Entra ID
Entra ID Free
Entra ID licensing
Entra Internet Access
Entra Private Access
Entra Private Access Tutorial
Entra Reporting
Entra Suite
error
Event
Event Grid
event viewer
Events
Exam Prep
Exec posts
exploring
ExpressRoute
expressroute local
Extended Network for Azure
external-id
external-identity
Features
federation
fiddler
FIDO2
file shares
File Sharing Security
FIM
finops
Firewall
Firewall Policy
Flex Comsumption Deployment
flow
Forrester Waves
foundry
free
FSLogix Best Practices
FSLogix Configuration
FSLogix File Share
FSLogix Performance
FSLogix Tips
FSLogix Troubleshooting
Function App
Function Calling
Gartner Magic Quadrant
gateway subnet
gatewaysubnet
genai
General
General Development
Generative AI
Git
GitHub
GitHub Actions
github copilot
GitHub Project
githubcopilot
Global Secure Access
gotchas
governance
gpt4o
granfeldt
Graph
HashiCorp
HashiCorp Ambassador
Healthcare
Helm
Home Office
Hot Cool Cold Archive Tiers
How-to
hub
hub-and-spoke
Hybird
Hybrid
Hybrid + Multicloud
Hybrid Cloud
IaaS
IaC
icmp
identity
Identity and access management
Identity-Based Security
In development
In preview
infrastructure
Infrastructure As Code
infrastructureascode
Integration
Internet of Things
Intune
Investor Relations
IoT
IP Addressing in Azure
IPv4
ISACA
IT Networking
IT Professionals
IT Security
IT Training
IT Tutorials
Jabra
java
just in time compute
KDC Proxy
Kerberos Authentication
Key Vault
kinde
KQL
KubeConfig
kubernetes
KubeTidy
Kusto
kusto query language
Lab
Landing Zones
Launched
learning
LINUX
Linux Server
Linux Virtual Machines
Linux VM
LLM
Load Balancer
load balancing
load testing
Lock Resources Azure
Log Analytics
Log Analytics Workspace
Logic Apps
Long-Term Servicing Channel
macOS
Management
Management and Governance
Media
mfa
Micosoft Ignite 2024
Microsoft
Microsoft 365
Microsoft 365 Security
microsoft ai
Microsoft Azure
Microsoft Azure Tutorial
Microsoft Certification
microsoft certifications
Microsoft Certified
Microsoft Cloud
Microsoft Cloud Security
Microsoft Cloud Storage
Microsoft Connect
Microsoft Copilot for Azure
Microsoft Defender
Microsoft Defender EASM
Microsoft Defender XDR
Microsoft Dev Box
Microsoft Earnings Results
Microsoft Entra
Microsoft Entra ID
Microsoft Entra Suite
Microsoft Fabric
Microsoft Graph
Microsoft Graph PowerShell
Microsoft identity management
Microsoft Ignite
Microsoft Ignite 2024
Microsoft Intune
Microsoft Learn
Microsoft Learning
Microsoft licensing
Microsoft PIM
Microsoft Playwright Testing
Microsoft Purview
Microsoft Security
Microsoft Sentinel
Microsoft Sentinel Repositories
Microsoft Sentinel UEBA
Microsoft SQL Server
Microsoft Training
Microsoft Visual Studio
microsoft-support
MicrosoftBuild
Midnight Blizzard (NOBELIUM)
Migration
MIM
Misc
MITRE ATT&CK
mixed reality
Mobile
Monitoring
MS-102
MS-102 Exam
msal
msee
MSEvents
MSIgnite2024
multi-region
multicloud
multiregion
MVPBuzz
NAT Gateway
NAT in Azure
network
Network Address Translation
Network security
network security group
Network Traffic Filtering
network virtual appliance
Network Watcher
network-tracking
networking
Networking Basics
new
NFS
NFS Azure
NFSPermissions
noisy
NSG
NTFS
NTFSPermissions
nva
NVIDIA
nxdomain
nxdomainredirect
oidc
Open AI
open source
openai
OpenAI Assistant
Operating System
OperatingSystem
Operational Excellence
operations
optimize
otp-verification
P1 vs P2
PaaS
PaaS networking
passkey
path prepending
Performance Efficiency
Phi-3
PIM
pipelines
Playbook
Pluralsight
postgresql
Power Apps
power automate
Power Automate Flow
power bi
Power BI Embedded
power-platform
powershell
Press Releases
Prevent Resource Deletion
Pricing & Offerings
Privacy
private dns
Private Endpoint
Private Endpoint Configuration
private endpoints
private link
Private Link Service Tutorial
private networking
Private Subnets
privatelink
privatelinkrealitybites
Privileged Identity Management
Process Improvement
Product Review
Productivity
Prompt Engineering
Prompty
Prototyping
Provisioned V1 vs V2
Provisioned V2 Azure
Public Speaking
Public vs Private IP
pullrequest
python
Python Virtual Environment
Quick Post
ransomware
ransomware-as-a-service
Raspberry Pi
RDP
Recent News
Regions & Datacenters
Reliability
remote desktop
Remote Rendering
resolution
Resource Locking
Retirements
route table
router
routeserver
routing
s2s vpn
Sandstorm
SCDPM
SCOM
Script
SCVMM
SDK and Tools
SdkAndTools
SDKs
Secure Azure Connections
Secure File Sharing
Secure Internet Access
Secure Remote Access
Secure SMB Access
Secure Web Gateway
security
Security strategies
Semantic Kernel
Sentinel
Sentinel Repositories
serverless
service endpoint policy
Service Management
Services
setup
Share Access Signature
SIEM
site-to-site
Sleet
SLM
SMB
SMB Configuration
SMB over QUIC
SMS
smtp-server
SOAR
Software-Defined Networking
speaking
Speech
Speech to Text
spoke
SQL Interview
SQL Server
SQL Server on Azure Virtual Machines
SSH
Star Blizzard (SEABORGIUM)
State-sponsored threat actor
storage
Storage Access
Storage Accounts
Storage Message Block
Storage Metrics
Storage Replicas
storage setup
Storm
subnet
Subnet Mask
Subnetting
Survey
Sysadmin
SysCtr
Syslog
System Center
System Center 2025
teams
tech tip
Technical
Technology
TechTips
Terraform
Terraform Tests
testing
Text Analytics
Thomas Maurer
Threat Detection
tips
tips-and-tricks
TLS 1.3 Encryption
Token theft
totp
trace
Training
Transaction Optimzed
tutorial
Ubuntu
udr
UEBA
Uncategorized
updated
Updates
User and Entity Behavior Analytics
user-attribute
user-defined route
VDI
VDI Solutions
Video
Virtual desktop infrastructure
virtual machine
Virtual Machine Scale Sets
Virtual Machines
virtual network
virtual network appliance
Virtual Network Gateway
Virtual Network Peering
virtual network service endpoint
Virtual Network Subnet
Virtual WAN
Virtualization
Visual Studio
Visual Studio Code
VNet
VNet Peering
vpn
VPN Alternative
VPN Gateway
vpn site-to-site
vwan
walk through
walkthrough
Web
web application firewall
Web Content Filtering
Web Filtering Policy
Windows
Windows 10
Windows 11
Windows 365
Windows AD
Windows Admin Center
Windows Console
windows containers
Windows Firewall
Windows Security
Windows Server
Windows Server 2022
Windows Server 2025
Windows Server Azure Edition
Windows Server Comparison
Windows Server Datacenter
Windows Server Deployment
Windows Server Features
Windows Server Hotpatching
Windows Server Licensing
Windows Server Management
Windows Server Service Channels
Windows Server Standard
Windows Subsystem for Linux (WSL)
Windows Terminal
Windows Virtual Desktop
Windows Virtual Machines
Workbooks
XDR
yaml
Year In Review
Zero Trust
Zero Trust Networking

December 16, 2024

Published by Charbel Nemnom on December 16, 2024

Optimize Costs Using Ingestion-Time Transformation for Fortinet Logs in Microsoft Sentinel

Fortinet firewall logs, when ingested into Sentinel’s `CommonSecurityLog` table, are billed at the Analytics tier rates. For organizations with high log volumes, this can result Continue […]

October 25, 2024

Published by Charbel Nemnom on October 25, 2024

Effective Approach To Collect Windows Firewall Events to Microsoft Sentinel

The built-in Windows Firewall is a great security feature for the Windows client and server operating systems. While not every organization actively uses Windows Firewall Continue […]