How to: Parsing AuditD Syslog in Microsoft Sentinel with a function and combining the events by EventID

New Article on how to parse AuditD events in Microsoft Sentinel for threat hunting and threat detection.
https://medium.com/@truvis.thornton/how-to-parsing-auditd-syslog-in-microsoft-sentinel-with-a-function-and-combining-the-events-by-eve-a65f418cfef1

article auditd blueteamsec detection events function hunting microsoft microsoft sentinel parsing sentinel syslog threat threat detection threat hunting