I created a dashboard using Microsoft Sentinel Workbooks: this is what I learned

Welcome back to AzureVlog, where we discuss the hottest IT topics over a warm cup of coffee. ☕ Today, we're focusing on Microsoft #Sentinel #Workbooks, your key to organizing and visualizing cybersecurity data effectively in a #Dashboard
If you've wondered how to transform raw data into meaningful insights, you've come to the right place. Microsoft Sentinel Workbooks (often referred to as dashboards) allow you to create custom visual presentations of your data, making it easier to understand, analyze, and act on your cybersecurity findings.
In this video, we will take you through the process of setting up a new workbook, customizing it to fit your specific needs, and utilizing advanced data filtering techniques. We'll also explore how to create role-based views and share vital integration and security tips.
Join us as we delve deep into the intricate world of Microsoft Sentinel Workbooks, empowering you to better manage your cybersecurity data and make more informed decisions.
Don't forget to LIKE, SHARE, and SUBSCRIBE to AzureVlog for more insights into Azure, cybersecurity, and of course, more coffee, more Microsoft Sentinel and Security. Got any questions or thoughts? Let's take them to the comments section - our virtual coffee table chat!
learn more here:
learn.microsoft.com/en-us/azu...

[@Ronyosan]

Hey man, I really love your videos! Btw, do you have a tutorial on how to connect salesforce data connector to Sentinel?

[@progod6017]

Do you know of an easy way to get / export automtion rules as ARM Template?

[@jase4772]

Nice intro to Workbooks. Question for you ....
How do you create a custom Workbook Template for others to simply save to their own My Workbooks view? Everything seems geared towards creating your own or creating one from existing templates. Microsoft's own documentation talks about a Save To option which no longer appears.
From what I can see once I've created a new SOC Dashboard under My Workbooks the only option there is is to use the Share this Azure Sentinel Report option. Is this the only way, bar exporting the JSON code?
Many thanks! 👍🏻

[@adventuresofa9jaguy322]

can you make a video to show how to auto add ip addresses or urls detected in your TI feed to your org's block list automatically

[@kvzonrise]

Can you share details on your coffee setup? :D

[@dorianhevrin5823]

😬 Promo`SM