swiftsolves-msft
|
ee72063328
|
externaldata lookup script
The following project tool provides a PS script to generate and lookup archived azure sentinel event logs that were created by data export rules to blob storage. Script generates the base KQL and includes and generates the SAS Uri Signatures needed for each blob in lookup time range. ~ See: https://swiftsolves.substack.com/p/azure-sentinel-data-export-to-azure
https://swiftsolves.substack.com/p/8766f774-2f47-4f08-9297-d460981cf904
https://swiftsolvesblog.blob.core.windows.net/images/genstoragectxkql-ps1-animation.gif
|
2021-09-26 22:30:06 -04:00 |