41554 blogs · [ { "id": "01a08753-18d5-72f6-b02b-5baa7d911bdc", "title": "Monitoring for DNS changes in Microsoft Sentinel", "url": "https://blog.rothe.uk/monitoring-for-dns-changes-in-microsoft-sentinel/", "published_at": "2025-07-06T11:40:00+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa7e6cd2ba", "title": "Monitoring Entra Auth Methods", "url": "https://blog.rothe.uk/monitoring-entra-auth-methods/", "published_at": "2025-06-25T16:01:36+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa7ea3529e", "title": "The Mysterious Case of the Disappearing Logs", "url": "https://blog.rothe.uk/mysterious-disappearing-logs/", "published_at": "2024-10-31T16:55:25+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa7f89eb2c", "title": "Internationalizing SIEM Rules", "url": "https://blog.rothe.uk/internationalizingsiemrules/", "published_at": "2024-06-14T20:45:38+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa8086ea1f", "title": "Weird issues with Entra ID Signin Logs", "url": "https://blog.rothe.uk/weird-issues-with-entra-id-signin-logs/", "published_at": "2024-01-31T00:00:00+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa817b10de", "title": "Integrating Canary Tokens with Microsoft Sentinel", "url": "https://blog.rothe.uk/integrating-canary-tokens-with-sentinel/", "published_at": "2021-12-28T12:47:57+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa82010d84", "title": "Hunting for Risky Rules in Office 365", "url": "https://blog.rothe.uk/risky-rules-in-office365/", "published_at": "2020-08-23T12:44:58+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa82e699ab", "title": "Analyzing Honeypot Data with Sentinel", "url": "https://blog.rothe.uk/analysing-honeypot-data/", "published_at": "2020-06-06T16:00:00+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa83d19663", "title": "Network IDS & Azure Sentinel", "url": "https://blog.rothe.uk/network-ids-azure-sentinel/", "published_at": "2020-03-22T13:34:04+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa84650053", "title": "Building a Tram-Time Display with AWS Lambda", "url": "https://blog.rothe.uk/serverless-tram-time-display/", "published_at": "2018-12-27T15:11:04+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa854a4230", "title": "Excel for Infosec", "url": "https://blog.rothe.uk/excel-for-infosec/", "published_at": "2018-10-13T11:23:05+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa858f1163", "title": "Process Guide - A tool for generating HTML process walkthrough guides using Microsoft Excel", "url": "https://blog.rothe.uk/process-guide/", "published_at": "2018-09-22T10:37:31+00:00" }, { "id": "01a08753-18d5-72f6-b02b-5baa86117e74", "title": "Taking the CPSA (Crest Practitioner Security Analyst) Exam", "url": "https://blog.rothe.uk/taking-the-cpsa-exam/", "published_at": "2018-09-13T12:14:00+00:00" } ] posts Claim your blog

Back to blog.rothe.uk

Blog · corpus.blog/blogs/blog.rothe.uk/posts

blog.rothe.uk

blog.rothe.uk

2025

Monitoring for DNS changes in Microsoft Sentinel original ↗

6 Jul 2025

Monitoring Entra Auth Methods original ↗

25 Jun 2025

2024

The Mysterious Case of the Disappearing Logs original ↗

31 Oct 2024

Internationalizing SIEM Rules original ↗

14 Jun 2024

Weird issues with Entra ID Signin Logs original ↗

31 Jan 2024

2021

Integrating Canary Tokens with Microsoft Sentinel original ↗

28 Dec 2021

2020

Hunting for Risky Rules in Office 365 original ↗

23 Aug 2020

Analyzing Honeypot Data with Sentinel original ↗

6 Jun 2020

Network IDS & Azure Sentinel original ↗

22 Mar 2020

2018

Building a Tram-Time Display with AWS Lambda original ↗

27 Dec 2018

Excel for Infosec original ↗

13 Oct 2018

Process Guide - A tool for generating HTML process walkthrough guides using Microsoft Excel original ↗

22 Sept 2018

Taking the CPSA (Crest Practitioner Security Analyst) Exam original ↗

13 Sept 2018