Microsoft Azure Sentinel 101: Linux Command Line Logging and Auditing Activity for Threats or Compromise using Snoopy

This picked up some traction on LinkedIn and figured I would share it here and maybe get some ideas and comments from community members with more experience on this.

I had about 30 small Linux machines and needed a quick way to get some insight in to what was going on and I found this as a good way to do so.

Hopefully this helps and jumps starts someone else who wants to get into SIEM engineering. Sentinel is a …

auditing azure azure sentinel command command line comments community compromise cybersecurity engineering experience great ideas insight linkedin linux logging machines microsoft microsoft azure point sentinel share siem threats