Skills
.Work. You
Rest

defensive-log-analysis

Community

Turn log data into actionable insights.

Data & Analytics#log-analysis#sentinel#kql#signin-logs#mde#azure-diagnostics
Authorriparino
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This skill provides a centralized reference for log data sources, onboarding, normalization, and retention policies to help analysts configure and verify telemetry across environments.

Core Features & Use Cases

  • KQL table reference: fast lookups of the most common log tables (DeviceProcessEvents, SigninLogs, AzureDiagnostics, etc.) and how they map to investigations.
  • Onboarding & Retention guidance: step-by-step guidance for log source onboarding and retention policy mapping.
  • Operational reference for Sentinel deployments: quick validation of coverage and queries for regular reporting and incident response.

Quick Start

Query the KQL table reference to validate log coverage and retention for Sentinel deployments.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: defensive-log-analysis
Download link: https://github.com/riparino/Claude-Cyber/archive/main.zip#defensive-log-analysis

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.