Sentinel, Threat Detection, Auditd, Information Security, Blue Team.
Part 2: Threat Detection Engineering and Incident Response with AuditD and Sentinel — Combine Events by ID with Laurel before sending to Sentinel as JSON and Parser for event searching and alert building NOTE: This article is based off the following: