SOCAutomators

SOCAutomators

Home
Archive
About

Recent posts

View all
Turning off incident correlation for Sentinel alerts in the Defender portal
Every so often, Microsoft slips a feature into preview that looks small on paper but solves a very loud problem for SOCs in the middle of a migration.
 • Andrea Fisher
Getting Started with Microsoft Sentinel
Agentic AI Readiness
 • Mike Palitto
Random cool things from Ignite
There were so many announcements at Ignite, it’s honestly hard to keep up with them.
 • Andrea Fisher
Heads-Up: Classic Alert Trigger Playbooks Are Going Away—Here’s What You Need to Do
If you’ve been assigning alert-trigger playbooks directly in the Analytics Rules wizard, it’s time to make some changes.
 • Andrea Fisher
New UEBA anomalies feature delivers faster hunts, sharper detections, better coverage
Starting today, Microsoft Sentinel UEBA users can work with anomalies directly in the Defender portal.
 • Andrea Fisher
Top posts
The latest from
Andrea Fisher
Fighting alert fatigue with built-in incident prioritization
User's avatar
Mike Palitto
Getting Started with Microsoft Sentinel
User's avatar
SOCAutomators
SOCAutomators
Helping build next generation security operations leveraging automations, risk analysis, machine learning and artificial intelligence.
© 2026 SocAutomators · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture