Sign in to confirm you’re not a bot
This helps protect our community. Learn more

Azure Sentinel - The New Intelligent Security Analytics for Enterprise

Microsoft Reactor
115K subscribers
<__slot-el>
<__slot-el>
209 views 2 years ago
Categorized as a Security Information and Event Management (SIEM) tool, Microsoft claims that Sentinel is the first of its type in the Cloud. This innovative service uses artificial intelligence to scrutinize data for detecting threats. It allows customers to borrow computing powers from Microsoft to crunch the information instead of purchasing and maintaining expensive servers. Join the session to take a deep dive into Azure Sentinel. The session will focus on: The session focuses on understanding of Azure Sentinel with all what and whys? We are also going to understand how Azure Sentinel collects data from all the sources along with Azure Sentinel configurations. What will you learn from this session? What is Azure Sentinel? Why Azure Sentinel? How Azure Sentinel Works? How to configure Azure Sentinel? Investigating with UEBA Responding to the threat using automation Kusto Query Language in Azure Sentinel and much more... Speaker Bio -  …...more
...more

Code of Conduct

0:21

Agenda

1:58

What Is Microsoft Sentinel

2:01

Background

2:24

Security Information and Event Management

5:01

Challenges Faced by Cyber Security Professionals

8:18

Collection

12:03

Stages of Sentinel Working Mechanism

12:12

Rest Api Integration

14:18

Agent Based Integration

14:33

Visualization

15:50

Fusion Template

19:26

Schedule Templates

20:04

Dashboard

26:02

Configuration Components

27:48

Analytics

28:35

Workspace

29:09

What Is Microsoft Sentinel Center

31:11

Sentinel Pricing

32:37

Azure Sentinel Pricing

32:41

Create a Log Analytics Workspace

34:36

Data Connectors

38:21

Microsoft Incident Creation Rule

43:58

Entity Mapping

45:38

Azure Ad Audit Logs

51:16

Wrap-Up

1:01:00
Azure Sentinel - The New Intelligent Security Analytics for Enterprise
5Likes
209Views
2022Jun 6
Categorized as a Security Information and Event Management (SIEM) tool, Microsoft claims that Sentinel is the first of its type in the Cloud. This innovative service uses artificial intelligence to scrutinize data for detecting threats. It allows customers to borrow computing powers from Microsoft to crunch the information instead of purchasing and maintaining expensive servers. Join the session to take a deep dive into Azure Sentinel. The session will focus on: The session focuses on understanding of Azure Sentinel with all what and whys? We are also going to understand how Azure Sentinel collects data from all the sources along with Azure Sentinel configurations. What will you learn from this session? What is Azure Sentinel? Why Azure Sentinel? How Azure Sentinel Works? How to configure Azure Sentinel? Investigating with UEBA Responding to the threat using automation Kusto Query Language in Azure Sentinel and much more... Speaker Bio - Krunal Trivedi, Microsoft MVP - Azure, MCT-India Regional Lead Krunal has been serving the IT industry for 14 years now. He has delivered training sessions for various IT MNCs in India as well as abroad. Apart from the training session he is also a part of software/product development where he is involved as lead -architect/consultant. He is Microsoft MVP - Azure, Microsoft Certified Trainer - MCT as well MCT - India Regional Lead. Social Handle of the speaker Twitter - @TrainerKrunal Website - www.techtrainingpoint.com [eventID:16253]

Follow along using the transcript.

Microsoft Reactor

115K subscribers