Скачать или смотреть Microsoft Sentinel: Cloud and Platform Activity Tables 2/2

Explore essential Microsoft Sentinel tables that track cloud activity, Azure operations, and platform-level changes. These tables help your SOC monitor security-relevant events across Azure, Microsoft 365, and connected services.

Covered Tables (Part 2A & 2B):
Part 2A
🔹 AzureActivity
🔹 AzureDiagnostics
🔹 AuditLogs
🔹 CommonSecurityLog
🔹 McasShadowItReporting
Part 2B
🔹 OfficeActivity
🔹 SecurityEvent
🔹 SigninLogs
🔹 Syslog
🔹 Event
🔹 WindowsFirewall

These Microsoft Sentinel tables are key for visibility into cloud operations, sign-in events, syslog data, and user activity.

#MicrosoftSentinel #AzureSecurity #DefenderXDR #CloudSecurity #AuditLogs #SOC #SIEM #Microsoft365 #Syslog #SecurityMonitoring