Log Analytics Workspace

December 12, 2025

Published by Charbel Nemnom on December 12, 2025

Secure Log Transfer Between Microsoft Sentinel Workspaces: A Serverless Approach

Enterprise Microsoft Sentinel deployments often require selective log replication between workspaces—from Production to Non-Production for testing, from regional instances to centralized Security Operations Centers (SOCs), Continue […]

November 19, 2025

Published by Charbel Nemnom on November 19, 2025

Configure Diagnostic Settings for Storage Accounts to Sentinel at Scale

This article will demonstrate how to enable and configure Diagnostic logging from all storage services within the Azure Storage Account – Blob, Queue, Table, and Continue […]

August 6, 2025

Published by Charbel Nemnom on August 6, 2025

Collect Security Events with Azure Monitor Agent on Workstations

Microsoft Defender for Endpoint (MDE) with Plan 2 provides a really great and relatively affordable way of ingesting large-scale events into your SIEM, like Microsoft Continue […]