Get to Know Security Monitoring and Alerting With Microsoft Sentinel SIEM and Cribl

Overview

Pitt Digital provides centralized security monitoring for the University using Microsoft Sentinel, a cloud-based Security Information and Event Management (SIEM) platform, and Cribl Stream (Cloud) and Cribl Edge (on-premise), a security data pipeline that collects and prepares log data before it reaches Sentinel.

By integrating with these University platforms, departments and schools can work with Pitt Digital to monitor, detect, and respond to security incidents and events that affect their assets.

Key Benefits

  • Centralized Log Management: Security-relevant data from systems, applications, and cloud services is collected and analyzed in one place.
  • Efficient, Secure Data Handling: Cribl Stream standardizes, filters, and routes log data, and protects sensitive information before it is stored.
  • Real-Time Monitoring: Microsoft Sentinel continuously monitors data and alerts Pitt Digital to potential threats as they occur, allowing quick response and reducing the impact of cyberattacks.
  • Advanced Analytics: Analytics and behavioral detection help identify suspicious activity and anomalies across the University environment.
  • Threat Intelligence Integration: Threat intelligence feeds provide added context about known and emerging threats.
  • Automated Response: Automation helps Pitt Digital enrich, escalate, and respond to security incidents quickly and consistently.

Roles and Responsibilities

  • Pitt Digital Security maintains the Sentinel and Cribl platforms, builds and tunes detections, triages alerts, and coordinates incident response.
  • Departments and schools keep log forwarding configured on their systems, notify Pitt Digital of changes that affect logging (such as upgrades, decommissions, or new systems), and help investigate incidents involving their assets.

Get Help

  • For questions about onboarding an on-premise server, cloud infrastructure, or SaaS application, please contact PittIT-SecurityEngineeringteam@pitt.edu
  • If you feel you are ready to have a service onboarded, please open a ticket here Submit a Pitt Digital Helpdesk Ticket