Morten Knudsen

Collecting CEF Syslogs using Azure Monitor Agent

03/04/202302/04/2023 by Morten Knudsen

This blog will give you insight on how to setup collection of syslogs (CEF) using Linux forwader server using Azure …

03/04/202302/04/2023 by Morten Knudsen

This blog will give you insight on how to setup collection of syslogs using Linux forwader server using Azure Monitor …

12/04/202302/04/2023 by Morten Knudsen

This section will show you the steps for setting up data transformations – and how you can do the transformation …

14/09/202402/04/2023 by Morten Knudsen

I am really passioned about the logging capabilities in M365 Defender and Azure with the power to bring data back from clients, servers, cloud and …

06/02/202306/02/2023 by Morten Knudsen

This blog covers 2 topics : (1) how you can automate clean-up of any orphaned security principal role assignments – …

23/04/202301/02/2023 by Morten Knudsen

Background Recently, I was asked to build a simple reporting-script, which integrates data from Microsoft Defender for Cloud and Azure …

18/03/202315/01/2023 by Morten Knudsen

It is important to ensure that your security posture systems are up-to-date to be able to prevent attacks. Microsoft Defender …

15/01/202312/01/2023 by Morten Knudsen

This blog is about keeping long-term Sentinel logs, giving you insight to the options today – with great opportunities to …

09/01/202309/01/2023 by Morten Knudsen

Do you want to automate alert rules including creating new alert rules and update existing – with checks every x …

02/01/202329/12/2022 by Morten Knudsen

This is a real-life example of how I helped reduce the log-cost by 43% for LogAnalytics & Sentinel combined for …