Episode 5 - Advanced Hunting Daten in Sentinel Workbooks
Episode von Die Sentinels von Phillipe und Andreas · 2. August 2026 · 22 min
The podcast introduces a format change, focusing on workbook discussions, errors, custom connectors, advanced hunting, workbooks export feature, data sources, analytics, extensive workbook features, advanced hunting and data lake, workbook size and query output, advanced hunting retention limit, workbook quota and API limit, and concludes with feedback and future plans.
Takeaways
Workbook changes and features
Advanced hunting and data sources
Chapters
00:00 Introduction and Podcast Format Change
01:27 Discussion on Workbook Changes
02:25 Workbook Error and Resolution
03:16 Workbook Custom Connector
04:14 Advanced Hunting and Custom Connector
06:04 Workbooks Export Feature
08:58 Data Sources and Analytics
10:26 Extensive Workbook Features
11:06 Advanced Hunting and Data Lake
13:19 Workbook Size and Query Output
14:04 Advanced Hunting Retention Limit
25:14 Workbook Quota and API Limit
27:35 Conclusion and Feedback
Weitere Episoden von „Die Sentinels“
- Episode 10 - Data Lake für alle - und jetzt? 18. Oktober 2026
- Episode 9 - Azure Portal: Abschied auf Raten 4. Oktober 2026
- Episode 8 - Security Copilot: Die freien SCUs in der Praxis 20. September 2026
- Episode 7 - Security Copilot: 400 SCUs, und jetzt? 6. September 2026
- Episode 6 - AMA: Wenn keine Logs ankommen 16. August 2026
- Episode 4 - Data Lake, Workbooks & Berechtigungen: Die neuen Features im Defender Portal 5. Juli 2026
- Episode 3 - Agentic SOC 7. Juni 2026
- Episode 2 - M365 E7: Neue Lizenz, neue Möglichkeiten 3. Mai 2026
- Episode 1 - MCP, Microsoft, Menschlichkeit 5. April 2026
- Trailer 1. März 2026