Operations

blog featured image what is it like to be a cloud security analyst

What is it Like to be a Cloud Security Analyst?

See what exciting activities CyberMSI cybersecurity analysts are doing today. Analysts at CyberMSI operate in a tier-less model, which means that they get to do all the activities that tier 2 and 3 analysts would normally do. However, greater opportunities come with greater responsibilities. In this blog we will follow an analyst to see what […]

What is it Like to be a Cloud Security Analyst? Read More »

01 azure sentinel workbooks that all socs should have

Microsoft Sentinel Workbooks that All SOCs Should Have.

Get more value out of your data for free with Workbooks. Microsoft Sentinel Workbooks allow security analysts and admins to view data about security in their environment using graphical displays. This is a powerful tool because any data that can be queried can now also be displayed in an easy-to-understand graphical format. Charts like the

Microsoft Sentinel Workbooks that All SOCs Should Have. Read More »

02 why isnt my azure sentinel ci cd pipeline working

Why Isn’t My Microsoft Sentinel CI/CD Pipeline Working?

Using DevOps to automate management of Microsoft Sentinel features. The “Deploying and Managing Microsoft Sentinel as Code” Tech Community article is a popular blog that describes how to use Microsoft DevOps to create a CI/CD pipeline for Microsoft Sentinel features. The tool described in the article is very powerful, but it is also so complex

Why Isn’t My Microsoft Sentinel CI/CD Pipeline Working? Read More »

why arent my azure sentinel playbooks working

Why Aren’t My Microsoft Sentinel Playbooks Working?

Solutions to some common Playbook pitfalls.   Some of the error messages that appear in Playbooks are either very cryptic or simply unexplained because many Microsoft Sentinel Logic App components are in preview. Security analysts that are deploying Microsoft Sentinel Playbooks for the first time may see esoteric error messages like the example below and get

Why Aren’t My Microsoft Sentinel Playbooks Working? Read More »

threat hunting

Is threat hunting a waste of time?

It can be unless you incorporate these strategies Many organizations are adopting regular cybersecurity threat hunting exercises as part of routine SOC operations. However, odds are that your threat hunting exercises aren’t very productive. The main reasons most threat hunting exercises are ineffectual range from the complexity of the threat landscape to lack of analytical/statistical

Is threat hunting a waste of time? Read More »