September 19, 2024
Once you have enabled Microsoft Sentinel UEBA (User and Entity Behavior Analytics) in your environment, you can customize the entity page and change the activities Continue […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- .NET Core
- #ai-tools
- #mexicocentral #microsoftdatacenters
- 2024
- 5 years
- 8000v
- Active Directory Domain Services
- AD Design
- adaptive cloud
- Advancing reliability
- Adversary-in-the-middle (AiTM)
- Agentic AI
- AI
- AI + Machine Learning
- ai assistant
- ai assitant
- ai studio
- AKS
- alm
- analytics
- Android
- Angular
- Annual Shareholders Meeting
- AOAI
- api manageme
- API Management
- apim
- app service
- App Services
- Apple Business Manager
- architecture center
- Artificial Intelligence
- ASP.NET
- ASP.NET Core
- ASUS NUC
- Audio Notes
- authentication
- authenticator-apps
- authorization
- automation
- Automation Rules
- availability-zone
- AVM
- avnm
- AZ Files
- AZ-900
- AZCopy
- Azure
- Azure 101
- Azure Active Directory
- Azure AD
- Azure AD DS
- Azure AD Join
- Azure Administration
- Azure Admins
- azure advisor
- Azure AI
- azure ai studio
- azure architecture
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Best Practices
- Azure Bicep
- Azure Blob
- Azure Blob Storage
- Azure Built-In Security
- Azure Certifications
- Azure CLI
- Azure Cloud
- Azure Cloud Management
- Azure Cloud Security
- azure copilot
- Azure Cost Management
- Azure Dashboards
- Azure Data Factory (ADF)
- Azure Demo
- Azure DevOps
- Azure DevOps Repository
- Azure Domain Services
- Azure Enablement Show
- Azure Essentials Show
- Azure File Share
- Azure File Shares
- Azure Files
- Azure Firewall
- Azure Governance
- Azure Image Builder
- Azure Internet Access
- Azure IP Addressing
- Azure Key Vault
- Azure Kubernetes Service
- Azure Lighthouse
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- azure management
- Azure Marketplace
- Azure MFA
- Azure Monitor
- Azure NAT Gateway Tutorial
- Azure NetApp Files
- Azure Network Security
- Azure Networking
- azure networking ai
- Azure Networking Configuration
- Azure Open Source
- azure openai
- azure openai service
- Azure Policy
- Azure Portal
- azure rbac
- Azure reservations
- Azure Resource Group
- Azure Resource Locks
- azure route server
- Azure Savings Plans
- Azure Security
- Azure Sentinel
- Azure SQL DB
- Azure SQL Managed Instance
- Azure Stack
- Azure Stack HCI
- Azure Storage
- Azure Storage Explorer
- azure subnet
- Azure Subnets
- azure tips and tricks
- azure training
- Azure Tutorial
- azure tutorial for beginners
- Azure Verified Modules
- Azure Virtual Desktop
- azure virtual machine
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual Networks
- Azure Virtual WAN
- Azure VM
- Azure VM Internet Access
- Azure VNets
- Azure Workbooks
- azure-ad-b2c
- azure-arc
- azure-b2c
- azurebicep
- azuredevops
- AzurePortal
- AzureResourceManager
- AzureTutorial
- backup
- BBS
- bgp
- Bicep
- biceplang
- bird
- blob
- blob storage
- Block Blob
- Book Review
- Bot
- branch
- Budget
- Bugs
- build
- Business
- Business Intelligence
- C#
- CAF
- Certificate Services
- certificates
- Certification
- Certifications
- chargeback
- Chatbots
- ciam
- CIFS
- CISO
- Citrix
- Citrix Cloud
- Cloud
- Cloud Adoption Framework
- cloud directory
- Cloud Infrastructure
- Cloud Native
- cloud networking
- cloud security
- Cloud Skills
- cloud-computing
- CloudFamily
- CloudSecurity
- Cmd
- CNAPP
- code
- Command Line
- Common Internet File System
- community
- compute
- Conditional Access
- Configuration
- containers
- copilot
- copilot ai
- copilot azure
- Copilot for Security
- Cost
- Cost Management
- could
- credential theft
- crowstrike
- crud-operations
- csr
- custom-attributes
- custom-policies
- Customer Spotlight
- Cyber Threat Intelligence
- Daily Tracker
- Dapr
- Dashboard
- data
- Databases
- Default Outbound Access
- Defender EASM
- Defender for Cloud
- deploy
- deploy Entra DS
- Developer Life
- Developer Tools
- developer-experience
- developers
- devops
- diagnostics
- dns
- docker
- Domain Admin
- domain join
- dotnet
- EASM
- Edge
- Edge Computing
- EF Core
- enterprise
- Enterprise Admin
- Entity Behavior
- entra
- Entra domain join
- Entra Domain Services
- Entra DS
- Entra DS AD DS
- Entra Hybrid Join
- Entra ID
- Entra Private Access
- error
- Event
- event viewer
- Events
- Exam Prep
- Exec posts
- Experts Live
- Experts Live Europe
- exploring
- ExpressRoute
- expressroute gateway
- expressroute traffic collector
- external-id
- external-identity
- face-id-recognition
- federation
- FIDO2
- file shares
- finops
- Firewall
- flow logs
- for_each
- forest
- Forrester Waves
- free
- free tutorial
- FSLogix File Share
- Function Calling
- functions
- GA
- Gartner Magic Quadrant
- gateway subnet
- gatewaysubnet
- genai
- General
- Generative AI
- Git
- Git for everyone
- GitHub
- GitHub Action
- GitHub Actions
- github desktop
- Global Secure Access
- gotchas
- Grafana
- Grafana Enterprise
- Grafana Essential
- Grafana Standard
- Graph
- graph-api
- GreenLake
- guest
- Hardening
- Hardware
- HashiCorp
- HashiCorp Ambassador
- HashiCorp Vault
- HDInsight
- Healthcare
- Home Office
- How-to
- HowTo
- HPE
- HPE Azure Stack
- HTTP
- https
- hub-and-spoke
- Hybrid + Multicloud
- Hybrid Azure AD Join
- Hybrid Cloud
- Hybrid Join
- hybrid network
- Hyper-V
- IaC
- identity
- Identity and access management
- IdentityNow
- infrastructure
- Infrastructure As Code
- Integration
- intel
- Intel NUC
- Internet of Things
- Intune
- Investor Relations
- IoT
- IP Addressing in Azure
- ipfix
- ipsec
- IPv4
- ISV Success
- IT Networking
- IT Professionals
- IT Security
- Jabra
- javascript
- Jumpstart
- just in time compute
- jwt-token
- Kerberos
- Key Vault
- kinde
- KQL
- KubeConfig
- kubernetes
- KubeTidy
- Kusto
- kusto query language
- Lab Kit
- latency
- learning
- Legacy password hash
- limitations
- LINUX
- LLM
- LLMOps
- load balancing
- load testing
- Lock Resources Azure
- Log Analytics
- Log Analytics Workspace
- Log4j
- logging
- Logic Apps
- logicapps
- Machine Learning and AI
- macOS
- Management
- Management and Governance
- Management Groups
- mfa
- Microservices
- Microsoft
- Microsoft 365
- microsoft ai
- Microsoft Azure
- Microsoft Build
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Copilot for Security
- Microsoft Defender
- Microsoft Defender EASM
- Microsoft Defender for Cloud
- Microsoft Defender XDR
- Microsoft Dev Box; Features; Services
- microsoft docs
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra ID
- Microsoft Entra Private Access
- Microsoft Fabric
- Microsoft Graph
- Microsoft Graph PowerShell
- Microsoft Ignite
- Microsoft Intune
- Microsoft Learn
- Microsoft Learning
- Microsoft Press
- Microsoft Purview
- Microsoft Security
- Microsoft Security Operations Analyst
- Microsoft Sentinel
- Microsoft Sentinel Repositories
- Microsoft Sentinel UEBA
- Microsoft SQL Server
- Microsoft Threat Intelligence
- Microsoft. Azure AD DS
- microsoftgraph
- Migration
- MKDocs
- Monitoring
- MS-102
- MS-102 Exam
- multi-factor-authentication
- NAT Gateway
- NAT in Azure
- Native Functions
- netflow
- network
- Network Address Translation
- network monitoring
- network observability
- network security group
- network security groups
- network visibility
- Network Watcher
- networking
- Networking Basics
- new
- NFS
- NFS Azure
- NFSPermissions
- noisy
- NSG
- NTFS
- NTFSPermissions
- NTLM
- Office
- Open AI
- open source
- openai
- operations
- optimize
- OST
- otp-verification
- Page Blob
- passkey
- Password Hash
- Password Sync
- Password Synchronization
- peering
- Pester
- Phi-3
- PIM
- pipeline
- pipelines
- PKI
- Plugins
- Podcasts
- policy
- postgresql
- power bi
- power-platform
- powerbi
- powershell
- powershell-script
- Press Releases
- Prevent Resource Deletion
- private endpoints
- Product Review
- Prompt Engineering
- Promptbook
- Proximity Placement Group
- proxy
- PST
- Public Speaking
- Public vs Private IP
- python
- Python Virtual Environment
- Quick Post
- ransomware
- ransomware-as-a-service
- Raspberry Pi
- RBAC
- RDP
- Recent News
- Remote code execution
- remote desktop
- Replication
- Reporting
- Resource Locking
- responsible-ai
- REST API
- Retro
- route table
- routed vpn
- routing
- SailPoint
- Sandstorm
- SAS
- SC-200
- SC-200 Exam
- Schema
- Script
- sd-wan
- sdk
- security
- Security Professional
- self hosted agent
- Semantic Kernel
- Sentinel
- Sentinel Repositories
- Server
- serverless
- service principal
- session recording
- setup
- sflow
- Share Access Signature
- SIEM
- sign-in
- sign-up
- site-to-site
- Sleet
- SLM
- SMB
- SMS
- smtp-server
- SOAR
- SOC
- Social Opinion
- speaking
- SQL Server
- SSH
- Startups
- State-sponsored threat actor
- storage
- Storage Access
- Storage Account
- storage explorer
- Storage Message Block
- storage setup
- Storm
- strongswan
- subnet
- Subnet Mask
- Subnetting
- Sysadmin
- Tag = AzurePortal
- teams
- Technical
- Technology
- TechTips
- Terraform
- Terraform Cloud
- Terraform Modules
- Terraform Tutorial
- Thomas Maurer
- Threat Intelligence
- tips
- tips-and-tricks
- Token theft
- totp
- traffic analytics
- traffic visibility
- Training
- try function
- tutorial
- Ubuntu
- udr
- UEBA
- Uncategorized
- unit tests
- updated
- Updates
- URL
- USB
- USB Drive
- USB media
- User and Entity Behavior Analytics
- user-attribute
- user-defined route
- user-profile
- Vault
- verified-credential
- verified-identity
- virtual machine
- Virtual Machine Scale Sets; Standby Pools
- Virtual Machines
- virtual network
- virtual network flow logs
- Virtual Network Gateway
- Virtual Network Peering
- Virtual WAN
- Virtualization
- Visual Studio
- visualization
- VNet
- vnet flow logs
- VNet Peering
- vpn
- walk through
- walkthrough
- Watchlist
- Watchlists
- Web
- Windows
- Windows 10
- Windows AD
- Windows Console
- windows containers
- Windows Package Manager
- Windows Server
- Windows Server 2025
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Work
- Workbooks
- XDR
- yaml
- youtube
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Darren Robinson
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Matt Felton
- Matt Ward
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rod Trent
- Rory Braybrook
- Sam Cogan
- Sarah Lean
- Scott Hanselman
- Simon Waight
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Wesley Haakman
- Will Velida
September 12, 2024
Published by Charbel Nemnom on September 12, 2024
Categories
Understanding how to effectively use Microsoft Sentinel User and Entity Behavior Analytics (UEBA) can enhance your organization’s security posture. Setting up and configuring UEBA within Continue […]