search

jamesory / Insecure-Protocols

Microsoft Sentinel Insecure Protocols Workbook
2 stars 1 forks source link

how to add this update workbook to MS Sentinel? #1

Open TheBigBear opened 1 year ago

TheBigBear commented 1 year ago

Hey this is really great stuff.

We have only started using Sentinel in the last month and there is so much to learn. It was a great disappointment to find that MS have pushed us to use AMA but has not maintained the out-of-the-box workbooks like Insecure Protocols to also work with AMA SecurityEvent data.

But how do I get this *.workbook file added to my MS Sentinel workbook list? And how much work would it be to have it as a template so we see it under templates and can then also save it as any new log analytics workspaces?

TheBigBear commented 1 year ago

Sorry, I solved it. I had gone to the wrong 'edit' button. this helped me. https://charbelnemnom.com/how-to-import-export-and-share-workbooks-in-azure-sentinel/#Import_workbooks