{"id":55972,"date":"2024-01-10T09:30:00","date_gmt":"2024-01-10T09:30:00","guid":{"rendered":"https:\/\/infrasos.com\/?p=55972"},"modified":"2024-01-09T17:06:14","modified_gmt":"2024-01-09T17:06:14","slug":"azure-security-monitoring-and-alerting-of-security-events","status":"publish","type":"post","link":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/","title":{"rendered":"Azure Security Monitoring and Alerting of Security Events"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"55972\" class=\"elementor elementor-55972\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-da9789e e-con-boxed e-con\" data-id=\"da9789e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-67c6e06 elementor-widget elementor-widget-text-editor\" data-id=\"67c6e06\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for monitoring and responding to security events in real-time. Monitoring of Azure resources detects, analyses, and acts upon <a href=\"https:\/\/infrasos.com\/azure-threat-detection-and-response-how-to-detect-and-respond\/\">potential threats<\/a>. This guide lays out the essential steps to configure a comprehensive security monitoring infrastructure within Azure, ensuring the seamless collection, analysis, and management of critical <a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">security logs<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e97ad2a e-con-boxed e-con\" data-id=\"e97ad2a\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8841aa3 elementor-widget elementor-widget-text-editor\" data-id=\"8841aa3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">Analyze Azure AD Security Logs: Audit &amp; Monitor Azure AD Activity<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b196179 elementor-widget elementor-widget-heading\" data-id=\"b196179\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">Prepare the Centralized Logging Infrastructure<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9c9e59e e-con-boxed e-con\" data-id=\"9c9e59e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ad096de elementor-widget elementor-widget-text-editor\" data-id=\"ad096de\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The first step is the implementation of the centralized logging system. Either <a href=\"https:\/\/infrasos.com\/real-time-monitoring-with-azure-ad-auditing-siem-analytics-tools\/\">Azure Sentinel<\/a> or Azure Monitor, or some third-party tool, such as IBM QRadar, SolarWinds Security Event Manager, etc.<\/p><p>The selected aggregation tool should have the features required to perform the security monitoring effectively.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6b1cb68 e-con-boxed e-con\" data-id=\"6b1cb68\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cc80f79 elementor-widget elementor-widget-heading\" data-id=\"cc80f79\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Requirements for Centralized Security Log Management Tool<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-013704e e-con-boxed e-con\" data-id=\"013704e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a62cd80 elementor-widget elementor-widget-text-editor\" data-id=\"a62cd80\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong>Compatibility with the Azure resources.<\/strong> Usually, the integration is configured through the Azure Event Hub which streamlines the data to the third-party destinations.<\/li><li><strong>Search and Query Capabilities<\/strong>. The tool must offer advanced search and query functionalities, enabling security analysts to perform detailed investigations, filter logs based on specific criteria, and identify security events effectively.<\/li><li><strong>Normalization and Correlation.<\/strong> Usually, when you deploy a log management tool, you expect it to collect data from the vast variety of different sources \u2013 Microsoft Entra ID, VMs, storage accounts, databases, etc. Capabilities for log normalization and correlation are crucial to make sense of data from different sources, aggregating and correlating logs to detect patterns or anomalies indicative of security threats.<\/li><li><strong>Alerting and Notifications.<\/strong> Must support customizable alerting and notification features, enabling security teams to set up alerts for specific events or thresholds to act upon security incidents promptly.<\/li><li><strong>Retention and Storage.<\/strong> Must support efficient <a href=\"https:\/\/infrasos.com\/azure-ad-auditing-enabling-and-configuring-audit-logs\/\">log storage and retention policies<\/a>, ensuring logs are retained for the required duration while managing storage costs effectively. For example, Azure Monitor stores the log entries in the Log Analytics workspace for up to 12 years.<\/li><\/ul><p>In addition to the listed features, other factors, such as performance, scalability, reliability take price into configuration. In case you have a new infrastructure (greenfield), which is mostly located in Azure, the easiest solution would be the usage of the Azure Monitor. In case you already infrastructure which you want to expand to the cloud, consider the integration of the existing tool with Azure resources.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-846637f e-con-boxed e-con\" data-id=\"846637f\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6fc7c58 elementor-widget elementor-widget-text-editor\" data-id=\"6fc7c58\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>What is next with Azure Security Monitoring and Alerting of Security Events?<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a78e02 elementor-widget elementor-widget-text-editor\" data-id=\"1a78e02\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-auditing-enabling-and-configuring-audit-logs\/\">Azure AD Auditing: Enabling and Configuring Audit Logs<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fe12104 elementor-widget elementor-widget-heading\" data-id=\"fe12104\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Enable Logging for the Resources<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bb72b72 e-con-boxed e-con\" data-id=\"bb72b72\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-85a986d elementor-widget elementor-widget-text-editor\" data-id=\"85a986d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>After the configuring of the logging system, the next step is the routing of the platform logs. They register events related for different Azure resources, more details is here <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/essentials\/platform-logs-overview\" target=\"_blank\" rel=\"noopener\">Overview of Azure platform logs<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bed1dee elementor-widget elementor-widget-heading\" data-id=\"bed1dee\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Resource Logs <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8d24aab e-con-boxed e-con\" data-id=\"8d24aab\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7036c7a elementor-widget elementor-widget-text-editor\" data-id=\"7036c7a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Resource logs<\/strong> provide information related to operations within the resource. The content of the logs depends on the resource type. This type of logs is very useful for the security monitoring as it registers access to the data. Resource logs aren\u2019t collected by default and to collect them you need to route them to the log consolidation tool.<\/p><ol><li>To enable resource logging, navigate to the page of the resource in the Admin Portal. Then, on the left side of the page, select <strong>Diagnostic Settings<\/strong>, under the <strong>Monitoring <\/strong>section.<strong><br \/><\/strong><\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a2b311 elementor-widget elementor-widget-image\" data-id=\"8a2b311\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5NzgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDIucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"523\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-768x523.png\" class=\"attachment-medium_large size-medium_large wp-image-55978\" alt=\"Azure Security Monitoring and Alerting of Security Events\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-768x523.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-300x204.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-720x490.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02.png 926w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29d5a39 elementor-widget elementor-widget-text-editor\" data-id=\"29d5a39\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li>In the window, press the <strong>Add Diagnostic Setting<\/strong><\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17e8e1d elementor-widget elementor-widget-image\" data-id=\"17e8e1d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Add Diagnostic Setting ResourceLogs02\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5NzksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"473\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03-768x473.png\" class=\"attachment-medium_large size-medium_large wp-image-55979\" alt=\"Add Diagnostic Setting ResourceLogs02\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03-768x473.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03-300x185.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03-720x444.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring03.png 904w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8871110 elementor-widget elementor-widget-text-editor\" data-id=\"8871110\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\"><li><strong>Diagnostic Setting <\/strong>page opens. Specify diagnostic setting name, metrics to send and the destinations. If you are using<strong> Azure Monitor, <\/strong>the destination should be the<strong> Log Analytics workspace<\/strong>, while an event hub is the most probable option for the third-party tools. After that, press <strong>Save<\/strong> to submit.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19af788 elementor-widget elementor-widget-image\" data-id=\"19af788\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events  ResourceLogs03\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5ODAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDQucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"415\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04-768x415.png\" class=\"attachment-medium_large size-medium_large wp-image-55980\" alt=\"Azure Security Monitoring and Alerting of Security Events ResourceLogs03\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04-768x415.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04-300x162.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04-720x389.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring04.png 858w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ab1fdc9 elementor-widget elementor-widget-text-editor\" data-id=\"ab1fdc9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">Take advantage of our Office 365 Reporting Tool <\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6776b1a elementor-widget elementor-widget-heading\" data-id=\"6776b1a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Activity Logs<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-864e138 elementor-widget elementor-widget-text-editor\" data-id=\"864e138\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">Activity logs collect the information<\/a> about the operations performed on the resource from the outside, for example, the changes made by the admin. These logs are enabled by default, however, sending them to the target destination, such as Log Analytics Workspace, requires extra configuration.<\/p><ol><li>To send activity logs to the log management system, go to the <strong>Monitor<\/strong> page in the Azure Admin Portal. On the left side menu, select <strong>Activity Log<\/strong>, and then select <strong>Export Activity Log<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73083b5 elementor-widget elementor-widget-image\" data-id=\"73083b5\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Export Activity Log Step\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5ODEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDUucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"549\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05-768x549.png\" class=\"attachment-medium_large size-medium_large wp-image-55981\" alt=\"Export Activity Logs Step\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05-768x549.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05-300x215.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05-1024x732.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05-720x515.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring05.png 1071w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-418b783 elementor-widget elementor-widget-text-editor\" data-id=\"418b783\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li>Next, press the <strong>Add Diagnostic Setting <\/strong>button.<strong><br \/><\/strong><\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-760aad7 elementor-widget elementor-widget-image\" data-id=\"760aad7\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring06.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events  ActivityLog02\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5ODgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDYucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"682\" height=\"475\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring06.png\" class=\"attachment-medium_large size-medium_large wp-image-55988\" alt=\"Azure Security Monitoring and Alerting of Security Events ActivityLog02\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring06.png 682w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring06-300x209.png 300w\" sizes=\"(max-width: 682px) 100vw, 682px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17b579a elementor-widget elementor-widget-text-editor\" data-id=\"17b579a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\"><li>A new page appears, use it to select the log types to send, specify the name of the diagnostic settings and choose the destination. And finally, press <strong>Save<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-70c3a76 elementor-widget elementor-widget-image\" data-id=\"70c3a76\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5ODksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDcucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"573\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07-768x573.png\" class=\"attachment-medium_large size-medium_large wp-image-55989\" alt=\"Azure Security Monitoring and Alerting of Security Events\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07-768x573.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07-300x224.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07-1024x764.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07-720x537.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring07.png 1060w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-deace7e elementor-widget elementor-widget-text-editor\" data-id=\"deace7e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-monitor-office-365-activity-logs-for-improved-security\/\">How to Monitor Office 365 Activity Logs for Improved Security<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-743e741 elementor-widget elementor-widget-heading\" data-id=\"743e741\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Microsoft Entra logs<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a517467 e-con-boxed e-con\" data-id=\"a517467\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5a29f39 elementor-widget elementor-widget-text-editor\" data-id=\"5a29f39\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Microsoft Entra logs include records related to the Azure identity provider. Find the list of the <a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">sign-in events<\/a>, <a href=\"https:\/\/infrasos.com\/check-azure-ad-audit-logs-for-user-sign-ins-success-and-failures\/\">audit logs<\/a> of the access level changes, registration of applications, etc. The logs are enabled by default and available in the Microsoft Entra admin center, only the routing the logs to the centralized logging system is required.<\/p><ol><li>To enable the Microsoft Entra logs forwarding, open the Microsoft Entra Admin Center. Then <strong>Identity<\/strong> &gt; <strong>Monitoring and health<\/strong> &gt; <strong>Diagnostic settings<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-72d9a4e e-con-boxed e-con\" data-id=\"72d9a4e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-918f5c3 elementor-widget elementor-widget-image\" data-id=\"918f5c3\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Entra Admin Centre Diagnostic settings EntraLogs01\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMDgucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"476\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08-768x476.png\" class=\"attachment-medium_large size-medium_large wp-image-55990\" alt=\"Entra Admin Centre Diagnostic settings EntraLogs01\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08-768x476.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08-300x186.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08-720x447.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring08.png 1001w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a6117e2 elementor-widget elementor-widget-text-editor\" data-id=\"a6117e2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\">\n \t<li>Repeat the steps 2 and 3 from the activity logs forwarding configuration.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f14f718 elementor-widget elementor-widget-template\" data-id=\"f14f718\" data-element_type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"7917\" class=\"elementor elementor-7917\">\n\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-30c8dcce ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"30c8dcce\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-19a106e2 ot-flex-column-vertical\" data-id=\"19a106e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ca1a12e elementor-widget elementor-widget-heading\" data-id=\"ca1a12e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c539a35 elementor-widget elementor-widget-text-editor\" data-id=\"4c539a35\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-16296eed ot-flex-column-vertical\" data-id=\"16296eed\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-65568df5 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"65568df5\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"7917\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"65568df5\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-51e3632 elementor-widget elementor-widget-heading\" data-id=\"51e3632\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Operating System logs<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b8a2fdd e-con-boxed e-con\" data-id=\"b8a2fdd\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c4d5b7b elementor-widget elementor-widget-text-editor\" data-id=\"c4d5b7b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In case virtual machines are used in your Azure infrastructure, ensure to configure the logging on the operating system level. Azure Monitor supports logging on machines running both Windows and Linux operating systems.<\/p><ol><li>To configure the operating system logs collection, go to Azure Monitor page in the Azure Admin Portal, then, on the navigation menu, select <strong>Data Collection Rules<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cc8fa6f elementor-widget elementor-widget-image\" data-id=\"cc8fa6f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring10.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events  Data Collection Rules OSLogs01\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTAucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"582\" height=\"477\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring10.png\" class=\"attachment-medium_large size-medium_large wp-image-55991\" alt=\"Azure Security Monitoring and Alerting of Security Events Data Collection Rules OSLogs01\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring10.png 582w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring10-300x246.png 300w\" sizes=\"(max-width: 582px) 100vw, 582px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-59dea49 e-con-boxed e-con\" data-id=\"59dea49\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0a28c09 elementor-widget elementor-widget-text-editor\" data-id=\"0a28c09\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li>Press <strong>Create<\/strong><\/li><li><strong>Create Data Collection Rule<\/strong> wizard shows up. Specify the rule name, resource group, region and platform. Optionally, select a data collection endpoint, if you want to collect some specific data, such as IIS logs (more details are found in <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/essentials\/data-collection-endpoint-overview?tabs=portal\" target=\"_blank\" rel=\"noopener\">Data collection endpoints in Azure Monitor<\/a>). Press <strong>Next<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bbe385f e-con-boxed e-con\" data-id=\"bbe385f\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f420d27 elementor-widget elementor-widget-image\" data-id=\"f420d27\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring11.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"OSLogs02\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTEucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"740\" height=\"517\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring11.png\" class=\"attachment-medium_large size-medium_large wp-image-55992\" alt=\"OSLogs02\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring11.png 740w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring11-300x210.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring11-720x503.png 720w\" sizes=\"(max-width: 740px) 100vw, 740px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0038d7b e-con-boxed e-con\" data-id=\"0038d7b\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-249f8de elementor-widget elementor-widget-text-editor\" data-id=\"249f8de\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"4\"><li>On the next page select <strong>Add resources<\/strong>, and select virtual machines you want to monitor. Press <strong>Next<\/strong> to continue the deployment. The Azure Monitor Agent is automatically installed on the selected virtual machines if they are running supported version of Windows Server or Linux. In case you want to monitor VM that runs the client version of Windows , follow the instructions in <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/agents\/azure-monitor-agent-windows-client\" target=\"_blank\" rel=\"noopener\">Azure Monitor agent on Windows client devices.<\/a><\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e43b4af e-con-boxed e-con\" data-id=\"e43b4af\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-25807a0 elementor-widget elementor-widget-image\" data-id=\"25807a0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring12.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Create data collection rule add resources\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTIucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"656\" height=\"517\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring12.png\" class=\"attachment-medium_large size-medium_large wp-image-55993\" alt=\"Create data collection rule add resources\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring12.png 656w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring12-300x236.png 300w\" sizes=\"(max-width: 656px) 100vw, 656px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-81ebf9d e-con-boxed e-con\" data-id=\"81ebf9d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-20dbb7a elementor-widget elementor-widget-text-editor\" data-id=\"20dbb7a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"5\"><li>On the <strong>Collect and Deliver<\/strong> page, select <strong>Add data source<\/strong>. A new window with two tabs appears. On the first tab, called <strong>Data Source<\/strong>, select the logs that you want to collect. The available log types depend on the operating system and on the data connection endpoint selected in step 2. For the security monitoring, select Windows Event Logs for Windows machines, and Linux Syslog for Linux machines. You may need to specify the additional information, such as minimum log level.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b0f707d e-con-boxed e-con\" data-id=\"b0f707d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4be0292 elementor-widget elementor-widget-image\" data-id=\"4be0292\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring13.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events choose data source type\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTQsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"555\" height=\"364\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring13.png\" class=\"attachment-medium_large size-medium_large wp-image-55994\" alt=\"Azure Security Monitoring and Alerting of Security Events choose data source type\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring13.png 555w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring13-300x197.png 300w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-533783e e-con-boxed e-con\" data-id=\"533783e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b27f88b elementor-widget elementor-widget-text-editor\" data-id=\"b27f88b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"6\">\n \t<li>On the second tab, press <strong>Add Destination<\/strong>. Select <strong>Azure Monitor Logs<\/strong> as the destination type, and select the required Log Analytics workspace in the <strong>Account or namespace<\/strong> Press <strong>Add data source<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8039055 e-con-boxed e-con\" data-id=\"8039055\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dbaba0b elementor-widget elementor-widget-image\" data-id=\"dbaba0b\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"OSLogs05\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTUsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTQucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"271\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14-768x271.png\" class=\"attachment-medium_large size-medium_large wp-image-55995\" alt=\"OSLogs05\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14-768x271.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14-300x106.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14-720x254.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring14.png 815w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-af72a60 elementor-widget elementor-widget-text-editor\" data-id=\"af72a60\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"7\"><li>Go to the <strong>Review + Create<\/strong> tab and press <strong>Create<\/strong> to complete the deployment.<\/li><\/ol><p>The installed Azure Monitor Agent isn\u2019t only used by Azure Monitor. It also used by Microsoft Defender for Cloud (by its component Defender for Servers in particular), if it is deployed. The usage of Defender for Cloud is highly recommended from both protecting and monitoring perspective, but requires additional budgeting. More details on the pricing are <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/defender-for-cloud\/#pricing\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ac8cb25 elementor-widget elementor-widget-text-editor\" data-id=\"ac8cb25\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/check-azure-ad-audit-logs-for-user-sign-ins-success-and-failures\/\">Check Azure AD Audit Logs for User Sign-Ins (Success Failures)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b62202 elementor-widget elementor-widget-heading\" data-id=\"9b62202\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Set Up Alerts to Stay Informed<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a8f3fa6 elementor-widget elementor-widget-text-editor\" data-id=\"a8f3fa6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>After you configured the log collection, the next step is to configure the proper notifications to the responsible personnel. In Azure, alert rules are used for this purpose. Alert rules are the configuration entities that bring together the monitoring data from the resource, condition and the action group.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-367c976 e-con-boxed e-con\" data-id=\"367c976\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0e7b19b elementor-widget elementor-widget-image\" data-id=\"0e7b19b\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring15.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Alert Rule\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU1OTk2IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTJcL0F6dXJlLVNlY3VyaXR5LU1vbml0b3JpbmcxNS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring15-qhj5jzubleabqf91yq6luz5v4qx01ppzddduy0m07c.png\" title=\"Alert Rule\" alt=\"Alert Rule\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0cf07a3 elementor-widget elementor-widget-heading\" data-id=\"0cf07a3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Creation of the Action Group<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-53e5d8d e-con-full e-con\" data-id=\"53e5d8d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;full&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b080224 elementor-widget elementor-widget-text-editor\" data-id=\"b080224\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Before creating the alert rule, let\u2019s pre-create<a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-group-reports\/\"> an action group<\/a>.<\/p><ol><li>To create an action group, go to Azure Monitor page in the Azure Admin Portal, then, on the navigation menu, select <strong>Alerts<\/strong>.Go to <strong>Create<\/strong> &gt; <strong>Action Group<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-07c58f1 elementor-widget elementor-widget-image\" data-id=\"07c58f1\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring19.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events Monitor Alerts\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTcsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTkucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"710\" height=\"464\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring19.png\" class=\"attachment-medium_large size-medium_large wp-image-55997\" alt=\"Azure Security Monitoring and Alerting of Security Events Monitor Alerts\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring19.png 710w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring19-300x196.png 300w\" sizes=\"(max-width: 710px) 100vw, 710px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95ac41d elementor-widget elementor-widget-text-editor\" data-id=\"95ac41d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li><strong>Create action group<\/strong> wizard appears. On the first tab, specify the basic information \u2013 resource group name, region, group name (must be unique within the resource group) and display name (the name that is shown in the notification messages). Provide the necessary information and press <strong>Next<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-93aa4ec elementor-widget elementor-widget-image\" data-id=\"93aa4ec\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring21.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Create Action Group Azure Security Monitoring and Alerting of Security Events\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMjEucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring21-qhj5kq5vcgu32btpupxkyqjh2iu4sz3jdlu4mnfi8g.png\" title=\"Create Action Group Azure Security Monitoring and Alerting of Security Events\" alt=\"Create action group Azure Security Monitoring and Alerting of Security Events\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-60c274c elementor-widget elementor-widget-text-editor\" data-id=\"60c274c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\"><li>On the <strong>Notifications<\/strong> tab, specify the necessary notifications \u2013 via email (to a specific role or to the selected address), SMS, push alert or voice call. Then finalize the creation by clicking on <strong>Review + Create<\/strong>, then <strong>Create<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cdac918 elementor-widget elementor-widget-image\" data-id=\"cdac918\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring20.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"ActionGroup03\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTU5OTgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMjAucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring20-qhj5kkiu7gmd4o1wrnhtjrypi7lxish5ctx7qznuy4.png\" title=\"ActionGroup03\" alt=\"ActionGroup03\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-58e85c5 elementor-widget elementor-widget-text-editor\" data-id=\"58e85c5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>During the action group creation, optionally configure some actions, not only notifications. Azure supports different types of actions \u2013 execution of Azure Automation runbook, start of the Azure Function, sending a webhook, creation of a ticket in the IT service management tool (such as ServiceNow), etc.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b19d85b elementor-widget elementor-widget-heading\" data-id=\"b19d85b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Creation of the Alert Rule<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bcd4e61 elementor-widget elementor-widget-text-editor\" data-id=\"bcd4e61\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>After the creation of the action group, create an alert rule.<\/p><ol><li>Back on the <strong>Alerts <\/strong>page<strong>, <\/strong>go to <strong>Create<\/strong> &gt; <strong>Alert Rule<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73ae23b elementor-widget elementor-widget-image\" data-id=\"73ae23b\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring16.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Create Alert Rule\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTYwMDAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTYucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring16-qhj5kr3pjavddxscp8c7j8axnwpi0o79pqhm3xe3g0.png\" title=\"Create Alert Rule\" alt=\"Create Alert Rule\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b28ff3 elementor-widget elementor-widget-text-editor\" data-id=\"0b28ff3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li><strong>Create an alert rule<\/strong> wizard appears. On the first page, press <strong>Select Scope<\/strong> and select the resources you are creating alert for. Press <strong>Next<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ff97f3 elementor-widget elementor-widget-image\" data-id=\"4ff97f3\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring17.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events Select scope\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTYwMDEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTcucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring17-qhj5l654knfyjp6i9eu8n4ib62ndftuz3sxdscrs5u.png\" title=\"Azure Security Monitoring and Alerting of Security Events Select scope\" alt=\"Azure Security Monitoring and Alerting of Security Events Select Scope\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b5b92e2 elementor-widget elementor-widget-text-editor\" data-id=\"b5b92e2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\"><li>On the <strong>Condition<\/strong> tab, select the proper signal for the alert. It can be some of the pre-created signals, such us modification of privileged accounts, or a custom log query using Kusto Query Language. After the selection, specify additional parameters of the condition, such as event level or event initiator. After the configuration of the condition press <strong>Next<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-81c7d46 elementor-widget elementor-widget-image\" data-id=\"81c7d46\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring18.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Security Monitoring and Alerting of Security Events  AlertRule03\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTYwMDIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMTgucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring18-qhj5l80sybij6x3ryfnhs418cue3v82fs28cqwozv2.png\" title=\"Azure Security Monitoring and Alerting of Security Events  AlertRule03\" alt=\"Azure Security Monitoring and Alerting of Security Events AlertRule03\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c52469 elementor-widget elementor-widget-text-editor\" data-id=\"5c52469\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"4\">\n \t<li>On the next page, select <strong>Select Action Group<\/strong> Select the necessary group from the drop-down list and press <strong>Next<\/strong>.<\/li>\n \t<li>On the <strong>Details<\/strong> tab, provide the necessary details, such as resource group and rule name, then complete the configuration by navigating to <strong>Review + Create<\/strong>, then <strong>Create<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d5df95 elementor-widget elementor-widget-image\" data-id=\"0d5df95\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring22.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"AlertRule04\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTYwMDMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzEyXC9BenVyZS1TZWN1cml0eS1Nb25pdG9yaW5nMjIucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring22-qhj5lcpzwhoysywy6zommkujbrqxxpl3gphs5ai2x4.png\" title=\"AlertRule04\" alt=\"AlertRule04\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8859353 elementor-widget elementor-widget-text-editor\" data-id=\"8859353\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/real-time-monitoring-with-azure-ad-auditing-siem-analytics-tools\/\">Real-time Monitoring with Azure AD Auditing: SIEM\/ Analytics Tools<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6939c2e elementor-widget elementor-widget-heading\" data-id=\"6939c2e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Alerting in Microsoft Defender for Cloud<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9e599b7 e-con-boxed e-con\" data-id=\"9e599b7\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-846f027 elementor-widget elementor-widget-text-editor\" data-id=\"846f027\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Additionally, if you implemented Microsoft Defender for Cloud, you need to configure alerting there as well.<\/p><ol><li>To configure alerting for <a href=\"https:\/\/infrasos.com\/azure-threat-detection-and-response-how-to-detect-and-respond\/\">Microsoft Defender for Cloud<\/a>, go to its page in Azure Admin Portal and select <strong>Security Alerts<\/strong> on the left side menu. Select any Alert from the appeared list.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aca5c1e elementor-widget elementor-widget-image\" data-id=\"aca5c1e\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring23.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"MDCAlerting01\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2MDA0IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTJcL0F6dXJlLVNlY3VyaXR5LU1vbml0b3JpbmcyMy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring23-qhj5ldnu3bq94kvl1i3972lzx5mb5eotsu59mkgnl8.png\" title=\"MDCAlerting01\" alt=\"MDCAlerting01\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cbf16cb elementor-widget elementor-widget-text-editor\" data-id=\"cbf16cb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\"><li>Press <strong>Take action<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7da820 elementor-widget elementor-widget-image\" data-id=\"f7da820\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring24.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"MDCAlerting02\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2MDA1IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTJcL0F6dXJlLVNlY3VyaXR5LU1vbml0b3JpbmcyNC5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"442\" height=\"586\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring24.png\" class=\"attachment-medium_large size-medium_large wp-image-56005\" alt=\"MDCAlerting02\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring24.png 442w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring24-226x300.png 226w\" sizes=\"(max-width: 442px) 100vw, 442px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-14144a2 e-con-boxed e-con\" data-id=\"14144a2\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6773c62 elementor-widget elementor-widget-text-editor\" data-id=\"6773c62\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\">\n \t<li>In the list of the available actions, select <strong>Configure Settings<\/strong>, under the <strong>Configured email notification settings<\/strong><\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26cf64b elementor-widget elementor-widget-image\" data-id=\"26cf64b\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring25.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"MDCAlerting03\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2MDA5IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTJcL0F6dXJlLVNlY3VyaXR5LU1vbml0b3JpbmcyNS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/Azure-Security-Monitoring25-qhj5m15su6mf6txg8a8xfeoirsehhua482gemhhtqm.png\" title=\"MDCAlerting03\" alt=\"MDCAlerting03\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-97aabce elementor-widget elementor-widget-text-editor\" data-id=\"97aabce\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"4\">\n \t<li>In the appeared <strong>Email Notifications<\/strong> page, specify the recipients and the notification type (based on the alert criticality of the alert), then press <strong>Save<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-698d1d5 elementor-widget elementor-widget-image\" data-id=\"698d1d5\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"MDCAlerting04\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2MDEwIiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTJcL0F6dXJlLVNlY3VyaXR5LU1vbml0b3JpbmcyNi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"357\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26-768x357.png\" class=\"attachment-medium_large size-medium_large wp-image-56010\" alt=\"MDCAlerting04\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26-768x357.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26-300x139.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26-1024x476.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26-720x335.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring26.png 1110w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4cb4dc7 elementor-widget elementor-widget-text-editor\" data-id=\"4cb4dc7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>That is a wrap! Thank you for reading Azure Security Monitoring and Alerting of Security Events. Let&#8217;s conclude.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c5c471a elementor-widget elementor-widget-text-editor\" data-id=\"c5c471a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-security-center-best-practices-how-to-secure-azure\/\">Azure Security Center Best Practices: How to Secure Azure<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b8c4e31 elementor-widget elementor-widget-heading\" data-id=\"b8c4e31\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Azure Security Monitoring and Alerting of Security Events Conclusion <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b5fc95e e-con-boxed e-con\" data-id=\"b5fc95e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a92e605 elementor-widget elementor-widget-text-editor\" data-id=\"a92e605\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The configuration of an efficient <a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">logging infrastructure<\/a> and the implementation of effective alerting mechanisms, as outlined in this guide, form the cornerstone of a resilient security posture. By leveraging centralized log management tools, enabling comprehensive resource and activity logs, and configuring helpful alerting systems, a cyber security team swiftly identifies, responds to, and mitigates <a href=\"https:\/\/infrasos.com\/azure-security-center-best-practices-how-to-secure-azure\/\">potential security threats<\/a>, ensuring a fortified defence of the critical infrastructure.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8681568 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8681568\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-43cc3812 ot-flex-column-vertical\" data-id=\"43cc3812\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-52dfbfaa elementor-widget elementor-widget-image\" data-id=\"52dfbfaa\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-2fd8f9e8 ot-flex-column-vertical\" data-id=\"2fd8f9e8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2607c195 elementor-widget elementor-widget-heading\" data-id=\"2607c195\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-188fce8c elementor-widget elementor-widget-text-editor\" data-id=\"188fce8c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19dac83a elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"19dac83a\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"55972\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"19dac83a\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b29e17c elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"2b29e17c\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for monitoring and responding to security events in real-time. Monitoring of Azure resources detects, analyses, and acts upon potential threats. This guide lays out the essential steps to configure a comprehensive security monitoring infrastructure within [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38],"tags":[51,45,113],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Azure Security Monitoring and Alerting of Security Events<\/title>\n<meta name=\"description\" content=\"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure Security Monitoring and Alerting of Security Events\" \/>\n<meta property=\"og:description\" content=\"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-10T09:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-09T17:06:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-768x523.png\" \/>\n<meta name=\"author\" content=\"Marat M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marat M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\"},\"author\":{\"name\":\"Marat M\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\"},\"headline\":\"Azure Security Monitoring and Alerting of Security Events\",\"datePublished\":\"2024-01-10T09:30:00+00:00\",\"dateModified\":\"2024-01-09T17:06:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\"},\"wordCount\":1812,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"azure\",\"cybersecurity\",\"monitoring\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\",\"url\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\",\"name\":\"Azure Security Monitoring and Alerting of Security Events\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2024-01-10T09:30:00+00:00\",\"dateModified\":\"2024-01-09T17:06:14+00:00\",\"description\":\"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure Security Monitoring and Alerting of Security Events\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\",\"name\":\"Marat M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"caption\":\"Marat M\"},\"description\":\"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.\",\"url\":\"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure Security Monitoring and Alerting of Security Events","description":"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/","og_locale":"en_US","og_type":"article","og_title":"Azure Security Monitoring and Alerting of Security Events","og_description":"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for","og_url":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2024-01-10T09:30:00+00:00","article_modified_time":"2024-01-09T17:06:14+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/12\/Azure-Security-Monitoring02-768x523.png"}],"author":"Marat M","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Marat M","Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/"},"author":{"name":"Marat M","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86"},"headline":"Azure Security Monitoring and Alerting of Security Events","datePublished":"2024-01-10T09:30:00+00:00","dateModified":"2024-01-09T17:06:14+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/"},"wordCount":1812,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["azure","cybersecurity","monitoring"],"articleSection":["Cybersecurity"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/","url":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/","name":"Azure Security Monitoring and Alerting of Security Events","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2024-01-10T09:30:00+00:00","dateModified":"2024-01-09T17:06:14+00:00","description":"Azure Security Monitoring and Alerting of Security Events. Securing the Azure environment demands proactive measures and also an effective system for","breadcrumb":{"@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/azure-security-monitoring-and-alerting-of-security-events\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Azure Security Monitoring and Alerting of Security Events"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86","name":"Marat M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","caption":"Marat M"},"description":"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.","url":"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/55972"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=55972"}],"version-history":[{"count":42,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/55972\/revisions"}],"predecessor-version":[{"id":56258,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/55972\/revisions\/56258"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=55972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=55972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=55972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}