Azure Security Center announcement
-
Link
Welcome to the Azure Security Center Forum - we're really happy to see you here. Feel free to ask any question you like about Azure Security Center. We read all the posts and will do our best to answer your questions quickly! Here are some resources to get your started:
- Check out Sarah Fender’s Azure Security Center post on the Azure Blog
- Watch Sarah’s presentation at AzureCon 2015,
- Read the Azure Security Center docs
- See the Azure Security Center announcement
- Stay up to date on Azure Security by reading the Azure Security Team Blog
We're looking forward to working with you - so let's work together to make Azure Security Center the best!
Thanks! -Tom Shinder, Project Manager, Azure Security Engineering.
-
0 Votes
WIQL: Is there a way to Directly read a .wiq file into the code?
I was wondering if there is a way to simply read an exported WIQ wiql query into my code rather than having to treat it like a string such as: public ...Unanswered | 2 Replies | 50 Views | Created by zFischer - 5 hours 2 minutes ago | Last reply by zFischer - 14 minutes ago -
0 Votes
About Security Center Workspace Pricing
Pricing & Settings -> Select Log Analytics Workspace, I'm asked to choose a Tier and I see the VM that I already enabled and pay for in that page again. I do not quite understand ...Answered | 3 Replies | 274 Views | Created by Canan_EB - Tuesday, November 12, 2019 8:46 AM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 7:11 PM -
1 Votes
SCEP License
Hi! Am i eligable to use SCEP (license) when onboarding my Server 2012 R2 onpremise servers to Defender ATP/security center ...Answered | 4 Replies | 319 Views | Created by Kjell Powers - Friday, November 15, 2019 7:14 AM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 7:11 PM -
1 Votes
Sentinel - extract logs
Sentinel will keep the logs files for 90 days, but I want to then archive them. Is there an API in which I can use to archive the logs into Storage Blobs in another location.Proposed | 4 Replies | 246 Views | Created by Cairn23 - Wednesday, November 13, 2019 4:02 PM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 7:08 PM -
0 Votes
How to refresh SECURITY CENTER
I've addressed/resolved the SECURTY CENTER recommendation but SEECURITY CENTER OVERVIEW does not reflect the change. How do I refresh SECURITY CENTER? :Answered | 5 Replies | 467 Views | Created by albert_winestein - Wednesday, November 6, 2019 2:42 PM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 7:03 PM -
0 Votes
Access Security Center Secure Score programmatically
Hello everyone, I wondered if it was possible to get the Azure Security Centre Secure Score through PowerShell or Rest? (not the O365 Secure ...Proposed | 5 Replies | 283 Views | Created by dthomas1769 - Friday, November 8, 2019 3:48 PM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 7:01 PM -
0 Votes
How to monitor wrongly classified files in O365 using CAS or AIP?
Hi, We are using SharePoint online and planning to classify our contents based on the confidentiality of the contents using AIP or CAS. If any document contains ...Answered | 4 Replies | 366 Views | Created by AhmedAQL - Wednesday, November 6, 2019 4:03 PM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 6:57 PM -
0 Votes
Sentinel agent and syslog config
This may be more of a syslog config question than Sentinel: If i install the Sentinel agent on a Linux server and have it forward logs to Sentinel, can syslog also retain a copy of the logs locally on ...Answered | 4 Replies | 353 Views | Created by Jim McGrady - Friday, November 1, 2019 6:18 AM | Last reply by Frank Hu MSFT - Wednesday, December 11, 2019 6:55 PM -
0 Votes
Unable to Validate new SAP WebHook/HTTP Endpoint Event as it is not detected by SAP Gateway/Web Server
Hello, when I try to add (and therefore validate) a new Event Grid Subscription (SAP) WebHook/HTTP Endpoint, I am unable to detect the Validation Event on SAP, so am unable to respond to the ...Proposed | 3 Replies | 229 Views | Created by camhunt - Saturday, December 7, 2019 3:28 PM | Last reply by Marilee Turscak - MSFT - Tuesday, December 10, 2019 7:29 PM -
0 Votes
Windows VM Security Baseline Auditing
We have a requirement to deploy an industry standard security baseline on all our Windows Servers and then be able to audit that they are in compliance. I was able to see in ...Proposed | 2 Replies | 188 Views | Created by dwclarkNU1 - Saturday, December 7, 2019 6:06 PM | Last reply by dwclarkNU1 - Tuesday, December 10, 2019 1:10 AM -
0 Votes
Monitoring agent should be installed on your machines
Security Center - Overview, Compute The monitoring agent should be installed on your machines, but I have installed and configured the client on the ...Proposed | 1 Replies | 160 Views | Created by J. Cloen - Saturday, December 7, 2019 10:13 AM | Last reply by Marilee Turscak - MSFT - Monday, December 9, 2019 10:44 PM -
0 Votes
Monitoring agent should be installed on your machines
Activated Security Center Standard and created a workspace, installed the OMS agent on all server. However it still shows that the OMS agent needs to be ...Unanswered | 2 Replies | 309 Views | Created by Marc-1983 - Monday, October 28, 2019 9:28 AM | Last reply by J. Cloen - Sunday, December 8, 2019 5:03 PM -
0 Votes
DevOps Personal Access Token In Code (Encrypt it?)
I'm developing an app to pull tasks and other work items using a Personal Access Token. Is there a best practices article or does anyone know if it is acceptable to store it within a config file ...Answered | 1 Replies | 170 Views | Created by zFischer - Saturday, December 7, 2019 10:28 PM | Last reply by Vaibhav-Chaudhari - Sunday, December 8, 2019 6:30 AM -
0 Votes
'Advanced data security' and 'Security Center' billing for Azure SQL Database
Advanced Data Security costs 15 USD/server/month. It includes Data Discovery & Classification, Vulnerability Assessment and Advanced Threat ...Answered | 1 Replies | 294 Views | Created by Taiob Ali - Tuesday, December 3, 2019 12:04 AM | Last reply by Marilee Turscak - MSFT - Wednesday, December 4, 2019 4:41 AM -
0 Votes
Connecting Intune with Azure Sentinel
It is possible to send the logs of Intune(Audit and Operational logs) to Azure Log analytics by enabling Diagnostics settings. How to link the Audit and Operational logs to Azure Sentinel?Answered | 2 Replies | 319 Views | Created by Prakashraaj - Wednesday, November 20, 2019 9:33 AM | Last reply by Mohamed.Salah - Thursday, November 28, 2019 6:18 AM -
0 Votes
Removing Azure Sentinel
Hello I have a question about Azure Sentinel. Can I remove Azure Sentinel from an existing Log Analytics workspace after exiting the Proof of ...Proposed | 3 Replies | 273 Views | Created by Daniel Hejda Defense-Ops - Sunday, November 24, 2019 10:29 PM | Last reply by Marilee Turscak - MSFT - Wednesday, November 27, 2019 10:45 PM -
0 Votes
Log Analytics Agent not installed on VM
Hi, I setup Security Center in Azure for one of my subscriptions. I set Automatic Provisioning "On" and expect that every VM created under that ...Proposed | 2 Replies | 247 Views | Created by Canan_EB - Monday, November 11, 2019 10:46 PM | Last reply by Marilee Turscak - MSFT - Tuesday, November 26, 2019 8:34 PM -
1 Votes
Integrating Sophos Endpoint Protection with Azure Sentinel
We are looking for an option to link Sophos endpoint protection logs to sentinel, but there is no direct data connector in azure sentinel. is there any option to do so?Proposed | 2 Replies | 294 Views | Created by Prakashraaj - Wednesday, November 20, 2019 12:00 PM | Last reply by ShashiShailaj_MSFT - Monday, November 25, 2019 6:03 AM -
1 Votes
Sentinel: how does a vendor create a brand new 'Data Connector'?
Hello: we are interested in creating an Azure Sentinel Data Connector that integrates with our platform and then offering that as one of the 30 or so OOTB Azure Sentinel Data Connectors. Problem is we ...Proposed | 3 Replies | 215 Views | Created by Intune evaluation - Tuesday, November 19, 2019 5:36 PM | Last reply by Intune evaluation - Wednesday, November 20, 2019 8:24 PM -
0 Votes
How to use AWS and build up a use case for Azure Sentinel Testing
I am trying to do a PoC using Azure Sentinel. I want to test Sentinel with AWS and see how Sentinel captures the security logs from AWS.So can anyone tell me how to develop this use case using AWS and ...Proposed | 1 Replies | 182 Views | Created by Palchak - Wednesday, November 20, 2019 2:14 PM | Last reply by SaurabhSharma-MSFT - Wednesday, November 20, 2019 7:05 PM - Items 1 to 20 of 298 Next ›
Azure Security Center announcement
-
Link
Welcome to the Azure Security Center Forum - we're really happy to see you here. Feel free to ask any question you like about Azure Security Center. We read all the posts and will do our best to answer your questions quickly! Here are some resources to get your started:
- Check out Sarah Fender’s Azure Security Center post on the Azure Blog
- Watch Sarah’s presentation at AzureCon 2015,
- Read the Azure Security Center docs
- See the Azure Security Center announcement
- Stay up to date on Azure Security by reading the Azure Security Team Blog
We're looking forward to working with you - so let's work together to make Azure Security Center the best!
Thanks! -Tom Shinder, Project Manager, Azure Security Engineering.