CISA’s new Logging Reference Architecture is aimed at federal agencies, but its practical value extends to critical-infrastructure operators and state, local, territorial, and tribal governments. The guidance provides checklists that organizations can use to test whether their logs are timely, detailed, protected, and useful during both active attacks and forensic investigations.

Source

Windows 11 Task Manager can show per-process NPU and GPU neural engine usage, helping you determine whether an AI app runs on dedicated AI hardware or falls back to the CPU. Microsoft introduced the optional columns in updates KB5089573 and KB5094126 for Windows 11 versions 24H2 and 25H2. Availability remains a gradual rollout on eligible devices.

Source

Microsoft Sentinel now attaches User and Entity Behavior Analytics (UEBA) insights to records from the UEBA behaviors layer. UEBA is a machine-learning feature that builds a baseline of typical activity for users, hosts, IP addresses, and applications, then flags activity that does not match that baseline. The behaviors layer groups raw security logs into structured summaries of who did what to whom. Microsoft added those findings to each behavior and expanded UEBA coverage to selected firewall, proxy, and cloud sources. The anomalies-on-behaviors capability is in preview and is available only for Microsoft Sentinel in the Microsoft Defender portal.

Source

Découvrez Maintenant, un outil de supervision open source tout-en-un pour surveiller les conteneurs, les services Web, les certificats et les tâches cron.

Le post Maintenant : monitoring de conteneurs, d’endpoints et de certificats sans empiler les outils a été publié sur IT-Connect.