Book

Learn Azure Sentinel

Azure Sentinel is an intelligent security service from Azure where Microsoft's main focus on developing sentinel is to integrate and bring together cloud security and artificial intelligence into effect. Here readers will gain enough understanding to make the most of Azure services to secure their environment from modern cybersecurity threats.

Offered byPackt Logo

Difficulty Level

Intermediate

Completion Time

14h4m

Language

English

About Book

Who Is This Book For?

This book is for solution architects and system administrators who are responsible for implementing new solutions in their infrastructure. Security analysts who need to monitor and provide immediate security solutions or threat hunters looking to learn how to use Azure Sentinel to investigate possible security breaches and gather forensic evidence will also benefit from this book. Prior experience with cloud security, particularly Azure, is necessary.

Book content

chapters 14h4m total length

Getting Started with Azure Sentinel

Azure Monitor - Log Analytics

Managing and Collecting Data

Threat Intelligence Integration

Using the Kusto Query Language (KQL)

Creating Useful Queries

Creating Analytic Rules

Introduction to Using Workbooks

Incident Management

Hunting and Forensics Gathering

Creating Playbooks and Logic Apps

ServiceNow Integration

Operational Tasks for Azure Sentinel

Constant learning and community contribution

Related Resources

Access Ready-to-Use Books for Free!

Get instant access to a library of pre-built books—free trial, no credit card required. Start training your team in minutes!

No credit card required