© 2023 Created by Sameh Younis
SIEM
69 articlesDive into the nuances of Security Information and Event Management systems. Understand their role in real-time analysis of security alerts, threat detection, and the importance of timely and informed responses to potential breaches.
SecOps
SIEM
Demystifying Microsoft Sentinel Pricing: Your Quick Guide
Clear breakdown of Sentinel’s pricing model—covering ingestion, discounts, and optional charges to help you optimize SIEM cost strategy.
Comparisons
SIEM
Visual Guide: Choosing the Right Microsoft Sentinel Storage & Archive Strategy
Explore 5 retention patterns and storage options in Sentinel—optimize SIEM costs without compromising security visibility or efficiency.
SecOps
SIEM
Secrets to Proactive Threat Hunting with Microsoft Sentinel
Explore Rod Trent’s must-read article on modern threat hunting with Sentinel—smart automation, enriched telemetry, and proactive SOC strategies.
AI & Copilot
Data Security
EDR
IAM
Multi-Cloud
SecOps
SIEM
XDR
A Visual Guide to Microsoft Security – Second Edition – April 2025 Edition
An updated executive-ready infographic covering Microsoft’s end-to-end security stack—XDR, SIEM, IAM, AI, and EGRC—all in one strategic visual.
AI & Copilot
Comparisons
SecOps
SIEM
Centralized Security Copilot for MSSPs: Azure Lighthouse Support & Comparison
New MSSP use cases for Security Copilot: compare Azure Lighthouse, GDAP, and Entra ID for multi-tenant access and SCU funding models.
Comparisons
SecOps
SIEM
Microsoft Sentinel Solution for Business Applications
Microsoft Sentinel now secures Power Platform and Dynamics 365 with pre-built rules, playbooks, and hunting queries. Compare its capabilities in my latest infographic.
EDR
SecOps
SIEM
XDR
Chinese Threat Actor Storm-0940 with CoverNetwork-1658 Detections and Mitigations
Storm-0940 targets USA election security with credential theft attacks. Key detection and mitigation guidance provided to support defenders.
SecOps
SIEM
XDR
Midnight Blizzard Spear-Phishing Campaign
Midnight Blizzard is conducting targeted spear-phishing with malicious RDP files. Learn key detection and mitigation measures to strengthen your defenses.
SecOps
SIEM
Microsoft Sentinel Schema Mapping for SIEM Migration Experience
Schema mapping and new features simplify migrating from Splunk to Microsoft Sentinel for streamlined analytics and improved SecOps.
Announcement
SecOps
SIEM
XDR
Announcing the Launch of the Microsoft Incident Response Ninja Hub!
Microsoft’s Incident Response Ninja Hub offers threat-hunting guides, best practices, and real-world insights to empower security teams and leaders.
