Azure Arc with new CEF/Syslog AMA setup for Microsoft Sentinel

#microsoft #azure #cybersecurity
Firstly we spin up an Ubuntu 20.04 box. Then create a service principal and generate a deployment script in Azure Arc. We then run the deployment script on the forwarder to create the Arc monitoring agent. We then spin up Microsoft Sentinel and configure the DCR. Lastly we generate a mock CEF event to ensure the pipeline works as intended.

[@TravelFeast360]

good one bro