How can we manage to monitor the attack surface in our legacy stack in combination with all the new cloud based applications? . Enter Azure Sentinel a cloud based SIEM tool that can gather data from all the different sources, and how we use Sentinel and Log Analytics to catch bad guys in the act.