September 19, 2024
Once you have enabled Microsoft Sentinel UEBA (User and Entity Behavior Analytics) in your environment, you can customize the entity page and change the activities Continue […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- .NET Core
- #ai-tools
- 2024
- 5 years
- 8000v
- Active Directory Domain Services
- AD Design
- adaptive cloud
- Advancing reliability
- Adversary-in-the-middle (AiTM)
- Agentic AI
- AI
- AI + Machine Learning
- ai assitant
- ai studio
- AIOps
- AKS
- alm
- analytics
- Analytics and Big Data
- Android
- Angular
- Annual Shareholders Meeting
- AOAI
- api manageme
- API Management
- apim
- apiops
- APIs
- App Configuration
- app service
- App Services
- Apple Business Manager
- Application Gateway
- architecture center
- Artificial Intelligence
- ASP.NET
- ASP.NET Core
- ASUS NUC
- Audio Notes
- authentication
- authenticator-apps
- automation
- availability-zone
- AVD
- AVM
- avnm
- AZ Files
- AZ-900
- AZCopy
- Azure
- Azure 101
- Azure 2025 Update
- Azure Active Directory
- Azure AD
- Azure AD DS
- Azure AD Join
- Azure Adaptive Cloud
- Azure Administration
- Azure Admins
- azure advisor
- Azure AI
- Azure AI Language
- Azure AI Speech
- azure ai studio
- Azure ai-services
- azure architecture
- Azure Automanage
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Best Practices
- Azure Bicep
- Azure Blob
- Azure Blob Storage
- Azure Built-In Security
- Azure Cache for Redis
- Azure Certifications
- Azure Chaos Studio
- Azure CLI
- Azure Cloud
- Azure Cloud Management
- Azure Cloud Security
- Azure Compute Fleet
- Azure confidential ledger
- Azure Container Apps
- Azure Container Instances
- Azure Container Registry
- Azure Container Storage
- azure copilot
- Azure Cosmos DB
- Azure Cost Management
- Azure Dashboards
- Azure Data Box
- Azure Data Explorer
- Azure Data Factory (ADF)
- Azure Data Lake Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Databricks
- Azure Demo
- Azure Deployment Environments
- Azure DevOps
- Azure DevOps Repository
- Azure Disk Storage
- Azure DNS
- Azure Domain Services
- Azure Elastic SAN
- Azure Enablement Show
- Azure Essentials Show
- Azure ExpressRoute
- Azure File Share
- Azure File Shares
- Azure Files
- Azure Firewall
- Azure Front Door
- Azure Functions
- Azure Image Builder
- Azure Internet Access
- Azure IoT Edge
- Azure IP Addressing
- Azure Key Vault
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Lighthouse
- Azure Load Balancer
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- Azure Machine Learning
- azure management
- Azure Maps
- Azure Marketplace
- Azure MFA
- Azure Migrate
- Azure Monitor
- Azure Monitor Agent
- Azure NAT Gateway
- Azure NAT Gateway Tutorial
- Azure NetApp Files
- Azure Network Security
- Azure Networking
- azure networking ai
- Azure Networking Configuration
- azure networking tutorial
- Azure Open Source
- azure openai
- azure openai service
- Azure Policy
- Azure Portal
- Azure Private Endpoint
- Azure Private Link
- Azure Private Link Service
- Azure Private Networking
- Azure Private Subnets
- Azure Red Hat OpenShift
- Azure reservations
- Azure Resource Graph
- Azure Resource Group
- Azure Resource Locks
- Azure Resource Manager
- azure route server
- Azure Savings Plans
- Azure Security
- Azure Sentinel
- Azure SignalR Service
- Azure Site Recovery
- Azure Sphere
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Edge
- Azure SQL Managed Instance
- Azure Stack
- Azure Stack HCI
- Azure Step-by-Step
- Azure Storage
- Azure Storage Actions
- Azure Storage Explorer
- Azure Storage Mover
- Azure Stream Analytics
- azure subnet
- Azure Subnets
- azure tips and tricks
- azure training
- Azure Tutorial
- azure tutorial for beginners
- Azure Verified Modules
- Azure Virtual Desktop
- azure virtual machine
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual Networks
- Azure Virtual WAN
- Azure VM
- Azure VM Internet Access
- Azure VM Security
- Azure VMware Solution
- Azure VNets
- Azure Web PubSub
- Azure Workbooks
- azure-ad-b2c
- azure-arc
- azure-b2c
- azurebicep
- azuredevops
- AzureResourceManager
- AzureTutorial
- backup
- Batch
- BBS
- bgp
- Bicep
- biceplang
- bird
- Blazor
- blob
- blob storage
- Block Blob
- Book Review
- Bot
- branch
- Budget
- Bugs
- build
- Business
- Business Intelligence
- C#
- Certificate Services
- certificates
- Certification
- Certifications
- chargeback
- Chatbots
- ciam
- CIFS
- CISO
- Citrix
- Citrix Cloud
- Cloud
- Cloud Adoption Framework
- cloud directory
- Cloud Foundation
- Cloud Infrastructure
- Cloud Native
- cloud networking
- cloud security
- Cloud Skills
- cloud-computing
- CloudFamily
- CloudSecurity
- Cmd
- CNAPP
- code
- codegeneration
- Command Line
- Common Internet File System
- community
- Compliance
- compute
- Conditional Access
- Configuration
- containers
- Content Delivery Network
- copilot
- copilot ai
- copilot azure
- Copilot for Security
- cordon
- Cost
- Cost Management
- credential theft
- crowstrike
- crud-operations
- csr
- custom-attributes
- custom-policies
- Customer Spotlight
- Cybersecurity
- Daily Tracker
- Dapr
- Databases
- Default Outbound Access
- Defender EASM
- Defender for Cloud
- delete
- deploy
- deploy Entra DS
- Developer Life
- Developer Tools
- developers
- devops
- diagnostics
- dns
- docker
- Domain Admin
- domain join
- dotnet
- EASM
- Edge
- Edge Computing
- EF Core
- Elastic Search
- enterprise
- Enterprise Admin
- Entity Behavior
- entra
- Entra domain join
- Entra Domain Services
- Entra DS
- Entra DS AD DS
- Entra Hybrid Join
- Entra ID
- Entra ID Free
- Entra ID licensing
- Entra Private Access
- Entra Reporting
- Entra Suite
- error
- Event
- Event Grid
- event viewer
- Events
- Exam Prep
- Exec posts
- Experts Live
- Experts Live Europe
- exploring
- ExpressRoute
- expressroute gateway
- expressroute traffic collector
- external-id
- external-identity
- face-id-recognition
- Features
- federation
- FIDO2
- file shares
- finops
- Firewall
- flow logs
- for_each
- forest
- Forrester Waves
- free
- FSLogix File Share
- Function App
- Function Calling
- functions
- GA
- Gartner Magic Quadrant
- gateway subnet
- gatewaysubnet
- genai
- General
- Generative AI
- Git
- GitHub
- GitHub Action
- GitHub Actions
- github copilot
- GitHub Project
- githubcopilot
- Global Secure Access
- gotchas
- graph-api
- GreenLake
- guest
- Hardening
- Hardware
- HashiCorp
- HashiCorp Ambassador
- Healthcare
- Home Office
- How-to
- HPE
- HPE Azure Stack
- HTTP
- https
- hub-and-spoke
- Hybrid + Multicloud
- Hybrid Azure AD Join
- Hybrid Cloud
- Hybrid Join
- Hyper-V
- IaaS
- IaC
- identity
- Identity and access management
- IdentityNow
- In development
- In preview
- infrastructure
- Infrastructure As Code
- Integration
- intel
- Intel NUC
- Internet of Things
- Intune
- Investor Relations
- IoT
- IP Addressing in Azure
- ipfix
- ipsec
- IPv4
- IT Networking
- IT Professionals
- IT Security
- IT Training
- Jabra
- javascript
- Jumpstart
- just in time compute
- jwt-token
- Kerberos
- kinde
- KubeConfig
- kubernetes
- KubeTidy
- Kusto
- Lab Kit
- Landing Zones
- latency
- Launched
- learning
- Legacy password hash
- limitations
- LINUX
- Linux Virtual Machines
- LLM
- LLMOps
- Load Balancer
- load balancing
- load testing
- Lock Resources Azure
- Log Analytics
- Log Analytics Workspace
- Log4j
- Logic Apps
- logicapps
- Machine Learning and AI
- macOS
- Management
- Management and Governance
- Media
- mfa
- Micosoft Ignite 2024
- Microservices
- Microsoft
- Microsoft 365
- microsoft ai
- Microsoft Azure
- Microsoft Build
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Cloud
- Microsoft Connect
- Microsoft Copilot for Azure
- Microsoft Copilot for Security
- Microsoft Defender
- Microsoft Defender EASM
- Microsoft Defender for Cloud
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Dev Box; Features; Services
- microsoft docs
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra ID
- Microsoft Entra Private Access
- Microsoft Entra Suite
- Microsoft Fabric
- Microsoft Graph
- Microsoft Graph PowerShell
- Microsoft identity management
- Microsoft Ignite
- Microsoft Intune
- Microsoft Learn
- Microsoft Learning
- Microsoft licensing
- Microsoft PIM
- Microsoft Playwright Testing
- Microsoft Press
- Microsoft Purview
- Microsoft Security
- Microsoft Security Operations Analyst
- Microsoft Sentinel
- Microsoft Sentinel Repositories
- Microsoft Sentinel UEBA
- Microsoft SQL Server
- Microsoft. Azure AD DS
- MicrosoftBuild
- microsoftgraph
- Midnight Blizzard (NOBELIUM)
- Migration
- Misc
- mixed reality
- Mobile
- Monitoring
- MS-102
- MS-102 Exam
- multi-factor-authentication
- MVPBuzz
- NAT Gateway
- NAT in Azure
- Native Functions
- netflow
- network
- Network Address Translation
- network observability
- Network security
- network security group
- network security groups
- network visibility
- Network Watcher
- networking
- Networking Basics
- new
- NFS
- NFS Azure
- NFSPermissions
- noisy
- NSG
- NTFS
- NTFSPermissions
- NTLM
- NVIDIA
- Office
- Open AI
- open source
- openai
- OpenAI Assistant
- Operating System
- OperatingSystem
- operations
- optimize
- OST
- otp-verification
- P1 vs P2
- PaaS
- Page Blob
- passkey
- Password Hash
- Password Sync
- Password Synchronization
- peering
- Phi-3
- PIM
- pipelines
- PKI
- Plugins
- Podcasts
- postgresql
- power bi
- power-platform
- powerbi
- powershell
- powershell-script
- Press Releases
- Prevent Resource Deletion
- Pricing & Offerings
- Private Endpoint Configuration
- private endpoints
- Private Link Service Tutorial
- Private Subnets
- Privileged Identity Management
- Product Review
- Prompt Engineering
- Prompty
- Proximity Placement Group
- proxy
- PST
- Public Speaking
- Public vs Private IP
- python
- Python Virtual Environment
- Quick Post
- ransomware
- ransomware-as-a-service
- Raspberry Pi
- RDP
- Recent News
- Regions & Datacenters
- remote desktop
- Remote Rendering
- Replication
- Reporting
- Resource Locking
- responsible-ai
- Retirements
- Retro
- route table
- routed vpn
- routing
- SailPoint
- Sandstorm
- SAS
- SC-200
- SC-200 Exam
- SCDPM
- Schema
- SCOM
- Script
- SCVMM
- sd-wan
- SdkAndTools
- security
- Security Professional
- Security strategies
- self hosted agent
- Semantic Kernel
- Sentinel
- Sentinel Repositories
- Server
- serverless
- Services
- session recording
- setup
- sflow
- Share Access Signature
- SIEM
- sign-in
- sign-up
- site-to-site
- Sleet
- SLM
- SMB
- SMS
- smtp-server
- SOAR
- SOC
- Social Opinion
- speaking
- SQL Server
- SQL Server on Azure Virtual Machines
- SSH
- Startups
- State-sponsored threat actor
- storage
- Storage Access
- Storage Account
- storage explorer
- Storage Message Block
- storage setup
- Storm
- strongswan
- subnet
- Subnet Mask
- Subnetting
- Sysadmin
- SysCtr
- System Center
- System Center 2025
- Tag = AzurePortal
- teams
- Technical
- Technology
- TechTips
- Terraform
- Terraform Cloud
- Terraform Modules
- Terraform Tutorial
- Text Analytics
- Thomas Maurer
- tips
- tips-and-tricks
- Token theft
- totp
- traffic analytics
- traffic visibility
- Training
- try function
- tutorial
- Ubuntu
- udr
- UEBA
- Uncategorized
- updated
- Updates
- URL
- USB
- USB Drive
- USB media
- User and Entity Behavior Analytics
- user-attribute
- user-defined route
- user-profile
- Vault
- verified-credential
- verified-identity
- Virtual desktop infrastructure
- virtual machine
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- Virtual Network Gateway
- Virtual Network Peering
- Virtual Network Subnet
- Virtual WAN
- Virtualization
- Visual Studio
- Visual Studio Code
- VNet
- vnet flow logs
- VNet Peering
- vpn
- VPN Gateway
- walk through
- walkthrough
- Web
- web application firewall
- Windows
- Windows 10
- Windows AD
- Windows Console
- windows containers
- Windows Firewall
- Windows Package Manager
- Windows Security
- Windows Server
- Windows Server 2025
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- Windows Virtual Machines
- Work
- Workbooks
- XDR
- yaml
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Darren Robinson
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Matt Felton
- Matt Ward
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rod Trent
- Rory Braybrook
- Sam Cogan
- Sarah Lean
- Scott Hanselman
- Simon Waight
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Wesley Haakman
- Will Velida
September 12, 2024
Published by Charbel Nemnom on September 12, 2024
Categories
Understanding how to effectively use Microsoft Sentinel User and Entity Behavior Analytics (UEBA) can enhance your organization’s security posture. Setting up and configuring UEBA within Continue […]