azure - The Random Adventure That Is Life (RATIL)

The Random Adventure That Is Life (RATIL)

Sign in Subscribe

azure

A collection of 3 posts

Quick and Dirty IP Lookout In Microsoft Sentinel

Quick and Dirty IP Lookout In Microsoft Sentinel

I had a need to determine if IPs in Microsoft Sentinel events were from our VPN block or not. Sentinel does not provide any native way to look up WHOIS information for an IP, so I had to do this in a quick and dirty fashion. Get the IP Ranges

Streaming Logs From Azure Event Grid to Log Analytics Workspace

Streaming Logs From Azure Event Grid to Log Analytics Workspace

I use Azure Sentinel and the way that Sentinel is able to analyze logs is through a Log Analytics Workspace. Some third-party platforms allow log streaming to Event Grid. So I needed a way to get my logs from Event Grid into the Log Analytics workspace. You might think this

Broken Azure

I saw this link posted on LinkedIn with a collection of free cloud training resources and decided to try my hand at some of the Azure ones given my relative lack of familiarity with Azure versus GCP and AWS. Kind of going in order, I decided to start with Secura's