Microsoft's Sysmon and Azure Sentinel are easy and inexpensive ways to log events on your network. Here's how to get started with them. Logging is the key to knowing how the attackers came in and how ...

Doug Bonderud is an award-winning writer capable of bridging the gap between complex and conversational across technology, innovation and the human condition. Having more players in the marketplace ...

Microsoft today took Azure Sentinel out of public preview and into general availability, making it an official Azure service. With Azure Sentinel, Microsoft has now officially entered the SIEM market.

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Microsoft is attempting to build a unified platform for cloud-based security with its Sentinel product. At its core, Sentinel is a security information and event management (SIEM) system that collects ...

My business has been providing IT services to SMBs since 1998 so I know the challenges and limitations of the "smaller end of town" intimately. The move to cloud is completed for most of my clients, ...