I’ve recently had to look into how the Certificates & secrets configured for their App Registrations could be monitored so administrators could be warned well ahead of the expiry so applications using these Enterprise Applications
As a follow up to my previous post: Monitoring, Alerting, Reporting Azure AD logins and login failures with Log Analytics and Logic Apps https://blog.terenceluk.com/2022/02/monitoring-alerting-reporting-azure-ad.html If your organization already uses Azure Sentinel as a (SIEM Security
I’ve recently been asked about why Log Analytics was not able to capture Security logs from a Windows server as it is not an option under the Log name list: The short answer is because
Problem You’ve recently cleaned up Log Analytics Workspaces that had Virtual Machines connected to it and wanted to re-add those VMs to new workspaces but notice that you see the message: Cannot enable – Workspace
Having monitoring and alerting set up for failed login attempts to any identity directory services (e.g. on-premise AD and Azure AD) have always been important yet often times neglected for many environments I’ve worked in.
