Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by TimeGenerated asc
Setting up Sentinel for Kubernetes Monitoring
A guide to using Microsoft Sentinel for monitoring the security of your containerized applications and orchestration platforms.
Advanced KQL for Threat Hunting: Window Functions
In my previous blog, I explained what window functions are and how we can use them for threat hunting and detection by giving Cloud Account Takeover Attacks as an example and using the prev() function: In this post, I'll explain the sliding_window_counts plugin and provide you with a query for Password Spray attack detection/hunting. According to the documentation, the sliding_window_counts plugin calculates counts and distinct count of values in a sliding window over a lookback period.
Protect your storage resources against blob hunting
How to detect, investigate and prevent blob-hunting Why is it important to understand blob-hunting? 1. Exfiltrating sensitive information from misconfigured resources is one of the top 3 cloud storage services* threats, and threat actors are continuously hunting storage objects because it’s easy, cheap, and there’s much to find. In some cases, they target your storage accounts. 2. Most people think they don’t have misconfigured storage resources. Most people do.
Azure Monitor - Restrict Log Analytics Query Results to Business Days and Business Hours
Jul 07 2021 12:00 AM Hello readers, Today I am back with another post to discuss one of the common needs that customers have: retrieving data in a given business interval. The interval could one or more days, one or more hours as well as the combination of both. Let’s see how to do it. As first step let’s identify the scenario in which this filter can be of help. Say that the IT department must only take care of data (and notification) which are inside the following interval: Monday to Friday.
Sql Server Audit Logins
Learn how to effectively audit logins to your SQL Server database with Database Audit Trails Implementation. The framework for autonomous intelligence The SQL Server Audit feature provides a way to track and log events that occur in the database, specifically focusing on login activities. This is crucial for maintaining security and compliance within your database environment. By auditing logins, you can monitor who accessed the database, when they accessed it, and what actions they performed.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with TimeGenerated
Contact TimeGenerated, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack