{"id":20348,"date":"2026-06-14T09:06:14","date_gmt":"2026-06-14T09:06:14","guid":{"rendered":"https:\/\/www.tyylidata.fi\/referenssit\/siem-visibility-and-it-infrastructure-hardening\/"},"modified":"2026-07-08T07:16:28","modified_gmt":"2026-07-08T07:16:28","slug":"siem-visibility-and-it-infrastructure-hardening","status":"publish","type":"projects","link":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/","title":{"rendered":"SIEM Visibility and IT Infrastructure Hardening"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"20348\" class=\"elementor elementor-20348 elementor-15787\" data-elementor-post-type=\"projects\">\n\t\t\t\t<div class=\"elementor-element elementor-element-601ffcc e-con-full e-flex e-con e-parent\" data-id=\"601ffcc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-4e479d4 e-flex e-con-boxed e-con e-child\" data-id=\"4e479d4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-5510c8f e-con-full e-flex e-con e-child\" data-id=\"5510c8f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3b33d44 elementor-widget elementor-widget-the7-heading\" data-id=\"3b33d44\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"the7-heading-title elementor-size-default\">SIEM Visibility and IT Infrastructure Hardening<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dad6896 elementor-widget elementor-widget-text-editor\" data-id=\"dad6896\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">A technical consultancy wanted to improve its ability to detect, analyse and respond to cyber threats in its IT environment. The goal was to move from a more reactive approach to cybersecurity towards better visibility and centralised monitoring. <\/p><p class=\"isSelectedEnd\">The project included the deployment of Microsoft Sentinel, review of log collection, alert management, architecture and hardening measures in the on-premises environment.<\/p><p>The work helped turn individual security observations into a managed development initiative, where technical visibility, risk prioritisation and practical hardening measures supported each other.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6333e90 e-con-full e-flex e-con e-child\" data-id=\"6333e90\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bc18060 elementor-widget elementor-widget-the7-heading\" data-id=\"bc18060\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Key areas<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4549533 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"4549533\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Microsoft Sentinel deployment<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Development of SIEM visibility<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Integration of logs and data sources<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Definition of alerts and analytics rules<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">KQL queries and security analytics<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Review of AD and Entra ID risks<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">On-premises environment hardening<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Consideration of NIS2 and ISO 27001 perspectives<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50944b5 elementor-align-left elementor-widget elementor-widget-the7_button_widget\" data-id=\"50944b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_button_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\"><a href=\"https:\/\/www.tyylidata.fi\/en\/services\/cybersecurity-for-smes\/\" class=\"box-button elementor-button elementor-size-md\">More about cybersecurity<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-07cf3e8 e-flex e-con-boxed e-con e-child\" data-id=\"07cf3e8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-5ee7d2b e-con-full e-flex e-con e-child\" data-id=\"5ee7d2b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa2fe9e elementor-widget elementor-widget-the7-heading\" data-id=\"aa2fe9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">What was done<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-42018d6 e-con-full e-flex e-con e-child\" data-id=\"42018d6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-680c670 elementor-widget elementor-widget-text-editor\" data-id=\"680c670\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">The work included, among other things:<\/p><ul><li class=\"isSelectedEnd\">deployment of the Microsoft Sentinel environment<\/li><li class=\"isSelectedEnd\">creation and basic configuration of Sentinel workspaces<\/li><li class=\"isSelectedEnd\">integration of logs and data sources<\/li><li class=\"isSelectedEnd\">configuration of analytics rules<\/li><li class=\"isSelectedEnd\">development of models for handling security alerts and incidents<\/li><li class=\"isSelectedEnd\">strengthening competence in KQL queries and security analytics<\/li><li class=\"isSelectedEnd\">fine-tuning Sentinel alerts and reducing false positives<\/li><li class=\"isSelectedEnd\">architecture review<\/li><li class=\"isSelectedEnd\">consideration of NIS2 and ISO 27001 perspectives in cybersecurity processes<\/li><li class=\"isSelectedEnd\">increasing cybersecurity awareness among staff and management<\/li><\/ul><p>Technical monitoring alone is not enough. Alerts need to become understandable observations, observations need to support decisions, and decisions need to lead to practical changes in the environment. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-48876b1 e-flex e-con-boxed e-con e-child\" data-id=\"48876b1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-f821c7a e-con-full e-flex e-con e-child\" data-id=\"f821c7a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dbdb92d elementor-widget elementor-widget-the7-heading\" data-id=\"dbdb92d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Technical approach<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dde425f e-con-full e-flex e-con e-child\" data-id=\"dde425f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b5df376 elementor-widget elementor-widget-text-editor\" data-id=\"b5df376\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">The technical approach combined cloud-based monitoring, assessment of the local IT infrastructure and practical hardening work.<\/p><p class=\"isSelectedEnd\">The key areas included:<\/p><ul><li class=\"isSelectedEnd\">Microsoft Sentinel as the SIEM solution<\/li><li class=\"isSelectedEnd\">use of Microsoft Defender services<\/li><li class=\"isSelectedEnd\">review of Entra ID and identity-related risks<\/li><li class=\"isSelectedEnd\">log collection and analytics rules<\/li><li class=\"isSelectedEnd\">KQL queries and analysis of security incidents<\/li><li class=\"isSelectedEnd\">hardening of the domain environment<\/li><li class=\"isSelectedEnd\">consideration of continuity and recovery planning<\/li><\/ul><p>During the work, the importance of the on-premises environment was especially highlighted. Protecting cloud services alone is not enough when local infrastructure still plays a critical role in business operations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5a8c931 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"5a8c931\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Microsoft Sentinel was deployed as the foundation for SIEM visibility<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Defender services were integrated into threat detection<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">AD and Entra ID risks were brought under review<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">On-premises hardening measures were carried out based on the findings<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b0bf01a e-grid e-con-full e-con e-child\" data-id=\"b0bf01a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-782588d e-con-full e-flex e-con e-child\" data-id=\"782588d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-623af95 elementor-widget elementor-widget-the7-heading\" data-id=\"623af95\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">SIEM<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9ad1a50 elementor-widget elementor-widget-the7-heading\" data-id=\"9ad1a50\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">Threat monitoring in one view<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a28418b e-con-full e-flex e-con e-child\" data-id=\"a28418b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1aa0ae4 elementor-widget elementor-widget-the7-heading\" data-id=\"1aa0ae4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">KQL<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3357f11 elementor-widget elementor-widget-the7-heading\" data-id=\"3357f11\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">Log analysis put into use<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-65cc489 e-con-full e-flex e-con e-child\" data-id=\"65cc489\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-90c2b58 elementor-widget elementor-widget-the7-heading\" data-id=\"90c2b58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">AD<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b5b0d88 elementor-widget elementor-widget-the7-heading\" data-id=\"b5b0d88\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"the7-heading-title elementor-size-default\">Domain environment hardening<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fc9fcae e-flex e-con-boxed e-con e-child\" data-id=\"fc9fcae\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b92e672 e-con-full e-flex e-con e-child\" data-id=\"b92e672\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b24f91e elementor-widget elementor-widget-the7-heading\" data-id=\"b24f91e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Outcome<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-846cad1 e-con-full e-flex e-con e-child\" data-id=\"846cad1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-672e82a elementor-widget elementor-widget-text-editor\" data-id=\"672e82a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">As a result of the project, the customer\u2019s visibility into events in the IT environment improved significantly. Sentinel provided a more centralised way to monitor alerts, analyse anomalies and develop response capability. <\/p><p class=\"isSelectedEnd\">The hardening work strengthened the protection of the on-premises environment in particular.<\/p><p>The outcome was a stronger technical foundation, better detection capability and a clearer direction for continuous cybersecurity development.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Microsoft Sentinel deployment and IT infrastructure hardening improved the customer\u2019s visibility into cyber threats, log events and risks in the on-premises environment.<\/p>\n","protected":false},"featured_media":20349,"template":"","meta":[],"project_category":[152,148,153],"class_list":["post-20348","projects","type-projects","status-publish","has-post-thumbnail","hentry","project_category-customer-cases","project_category-cybersecurity","project_category-microsoft-365-cloud"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SIEM Visibility and Infrastructure Hardening | Tyylidata<\/title>\n<meta name=\"description\" content=\"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SIEM Visibility and Infrastructure Hardening | Tyylidata\" \/>\n<meta property=\"og:description\" content=\"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/\" \/>\n<meta property=\"og:site_name\" content=\"Tyylidata\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tyylidata\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-08T07:16:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-freestockpro-12969403.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"640\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/\",\"name\":\"SIEM Visibility and Infrastructure Hardening | Tyylidata\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-freestockpro-12969403.webp\",\"datePublished\":\"2026-06-14T09:06:14+00:00\",\"dateModified\":\"2026-07-08T07:16:28+00:00\",\"description\":\"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-freestockpro-12969403.webp\",\"contentUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-freestockpro-12969403.webp\",\"width\":960,\"height\":640,\"caption\":\"Data and technology help create a clearer overall view to support business development.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/siem-visibility-and-it-infrastructure-hardening\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Etusivu\",\"item\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Referenssit\",\"item\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SIEM Visibility and IT Infrastructure Hardening\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\",\"name\":\"Tyylidata\",\"description\":\"Selke\u00e4mpi\u00e4 teknologiap\u00e4\u00e4t\u00f6ksi\u00e4 yrityksille.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#organization\",\"name\":\"Tyylidata\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Logo_tyyli_25_sq_wt.webp\",\"contentUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Logo_tyyli_25_sq_wt.webp\",\"width\":2014,\"height\":1869,\"caption\":\"Tyylidata\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/tyylidata\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/tyylidata\\\/\",\"https:\\\/\\\/www.instagram.com\\\/tyylidata\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SIEM Visibility and Infrastructure Hardening | Tyylidata","description":"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/","og_locale":"en_US","og_type":"article","og_title":"SIEM Visibility and Infrastructure Hardening | Tyylidata","og_description":"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.","og_url":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/","og_site_name":"Tyylidata","article_publisher":"https:\/\/www.facebook.com\/tyylidata","article_modified_time":"2026-07-08T07:16:28+00:00","og_image":[{"width":960,"height":640,"url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-freestockpro-12969403.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/","url":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/","name":"SIEM Visibility and Infrastructure Hardening | Tyylidata","isPartOf":{"@id":"https:\/\/www.tyylidata.fi\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/#primaryimage"},"image":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-freestockpro-12969403.webp","datePublished":"2026-06-14T09:06:14+00:00","dateModified":"2026-07-08T07:16:28+00:00","description":"Tyylidata improved SIEM visibility with Microsoft Sentinel and hardened AD, Entra ID and on-premises IT infrastructure.","breadcrumb":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/#primaryimage","url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-freestockpro-12969403.webp","contentUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-freestockpro-12969403.webp","width":960,"height":640,"caption":"Data and technology help create a clearer overall view to support business development."},{"@type":"BreadcrumbList","@id":"https:\/\/www.tyylidata.fi\/en\/references\/siem-visibility-and-it-infrastructure-hardening\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Etusivu","item":"https:\/\/www.tyylidata.fi\/en\/"},{"@type":"ListItem","position":2,"name":"Referenssit","item":"https:\/\/www.tyylidata.fi\/en\/references\/"},{"@type":"ListItem","position":3,"name":"SIEM Visibility and IT Infrastructure Hardening"}]},{"@type":"WebSite","@id":"https:\/\/www.tyylidata.fi\/en\/#website","url":"https:\/\/www.tyylidata.fi\/en\/","name":"Tyylidata","description":"Selke\u00e4mpi\u00e4 teknologiap\u00e4\u00e4t\u00f6ksi\u00e4 yrityksille.","publisher":{"@id":"https:\/\/www.tyylidata.fi\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tyylidata.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.tyylidata.fi\/en\/#organization","name":"Tyylidata","url":"https:\/\/www.tyylidata.fi\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tyylidata.fi\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2026\/06\/Logo_tyyli_25_sq_wt.webp","contentUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2026\/06\/Logo_tyyli_25_sq_wt.webp","width":2014,"height":1869,"caption":"Tyylidata"},"image":{"@id":"https:\/\/www.tyylidata.fi\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tyylidata","https:\/\/www.linkedin.com\/company\/tyylidata\/","https:\/\/www.instagram.com\/tyylidata\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects"}],"about":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/types\/projects"}],"version-history":[{"count":5,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20348\/revisions"}],"predecessor-version":[{"id":20601,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20348\/revisions\/20601"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/media\/20349"}],"wp:attachment":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/media?parent=20348"}],"wp:term":[{"taxonomy":"project_category","embeddable":true,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/project_category?post=20348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}