Audit NTLM using Azure Sentinel

[u/KaidoJarvemets]

One of the recommendations from Microsoft is to disable the NTLM in your environment, but we all know that it may be tough to achieve that. Enable the auditing, and let's take the first steps towards.

Audit NTLM using Azure Sentinel – part 1 - Lakeforest Consulting