Microsoft Sentinel in Action

Microsoft Sentinel in Action

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key Features Collect, normalize, and analyze security information from multiple data sources Integrate AI, machine learning, built-in and custom threat analyses, and automation to build optimal security solutions Detect and investigate possible security breaches to tackle complex and advanced cyber threats Book Description Microsoft Sentinel is a security information and event management (SIEM) tool developed by Microsoft that helps you to integrate cloud security and artificial intelligence (AI). This book will enable you to implement Microsoft Sentinel and understand how it can help detect security incidents in your environment with integrated AI, threat analysis, and built-in and community-driven logic. The book begins by introducing you to Microsoft Sentinel and Log Analytics. You'll then get to grips with data collection and management, before learning how to create effective Microsoft Sentinel queries to detect anomalous behaviors and activity patterns. Moving ahead, you'll learn about useful features such as entity behavior analytics and Microsoft Sentinel playbooks along with exploring the new bi-directional connector for ServiceNow. As you progress, you'll find out how to develop solutions that automate responses needed to handle security incidents. Finally, you'll grasp the latest developments in security, discover techniques to enhance your cloud security architecture, and explore how you can contribute to the security community. By the end of this Microsoft Sentinel book, you'll have learned how to implement Microsoft Sentinel to fit your needs and be able to protect your environment from cyber threats and other security issues. What you will learn Implement Log Analytics and enable Microsoft Sentinel and data ingestion from multiple sources Get to grips with coding using the Kusto Query Language (KQL) Discover how to carry out threat hunting activities in Microsoft Sentinel Connect Microsoft Sentinel to ServiceNow for automated ticketing Find out how to detect threats and create automated responses for immediate resolution Use triggers and actions with Microsoft Sentinel playbooks to perform automations Who this book is for If you are an IT professional with prior experience in other Microsoft security products and Azure and are now looking to expand your knowledge to incorporate Microsoft Sentinel, then this book is for you. Security experts using an alternative SIEM tool who want to adopt Microsoft Sentinel as an additional service or as a replacement will also find this book useful.

Download Now
Author
Publisher Packt Publishing Ltd
Release Date
ISBN 1801813582
Pages 478 pages
Rating 4/5 (87 users)

More Books:

Microsoft Sentinel in Action
Language: en
Pages: 478
Authors: Richard Diver
Categories: Computers
Type: BOOK - Published: 2022-02-10 - Publisher: Packt Publishing Ltd

GET EBOOK

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key Featu
Microsoft Sentinel in Action
Language: en
Pages: 478
Authors: Richard Diver
Categories: Cloud computing
Type: BOOK - Published: 2022 - Publisher:

GET EBOOK

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key Featu
Microsoft Azure Sentinel
Language: en
Pages:
Authors: Yuri Diogenes
Categories: Computers
Type: BOOK - Published: 2020-02-25 - Publisher: Microsoft Press

GET EBOOK

Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft’s advanced cloud-based SIEM Microsoft’s cloud-based Azure Sentinel helps you fu
Microsoft Azure Infrastructure Services for Architects
Language: en
Pages: 448
Authors: John Savill
Categories: Computers
Type: BOOK - Published: 2019-10-11 - Publisher: John Wiley & Sons

GET EBOOK

An expert guide for IT administrators needing to create and manage a public cloud and virtual network using Microsoft Azure With Microsoft Azure challenging Ama
Implementing Hybrid Cloud with Azure Arc
Language: en
Pages: 242
Authors: Amit Malik
Categories: Computers
Type: BOOK - Published: 2021-07-16 - Publisher: Packt Publishing Ltd

GET EBOOK

Accelerate hybrid cloud innovation using Azure Arc with the help of real-world scenarios and examples Key Features Get to grips with setting up and working with
Mastering Azure Security
Language: en
Pages: 320
Authors: Mustafa Toroman
Categories: Computers
Type: BOOK - Published: 2022-04-28 - Publisher: Packt Publishing Ltd

GET EBOOK

Get to grips with artificial intelligence and cybersecurity techniques to respond to adversaries and incidents Key Features Learn how to secure your Azure cloud
Application Delivery and Load Balancing in Microsoft Azure
Language: en
Pages: 112
Authors: Derek DeJonghe
Categories:
Type: BOOK - Published: 2020-12-04 - Publisher: "O'Reilly Media, Inc."

GET EBOOK

With more and more companies moving on-premises applications to the cloud, software and cloud solution architects alike are busy investigating ways to improve l
Microsoft Azure Architect Technologies and Design Complete Study Guide
Language: en
Pages: 768
Authors: Benjamin Perkins
Categories: Computers
Type: BOOK - Published: 2021-01-13 - Publisher: John Wiley & Sons

GET EBOOK

Become a proficient Microsoft Azure solutions architect Azure certifications are critical to the millions of IT professionals Microsoft has certified as MCSE an
Microsoft Security Operations Analyst Exam Ref SC-200 Certification Guide
Language: en
Pages: 288
Authors: Trevor Stuart
Categories: Computers
Type: BOOK - Published: 2022-04-07 - Publisher: Packt Publishing Ltd

GET EBOOK

Remediate active attacks to reduce risk to the organization by investigating, hunting, and responding to threats using Microsoft Sentinel, Microsoft Defender fo
Exam Ref AZ-304 Microsoft Azure Architect Design Certification and Beyond
Language: en
Pages: 520
Authors: Brett Hargreaves
Categories: Computers
Type: BOOK - Published: 2021-07-23 - Publisher: Packt Publishing Ltd

GET EBOOK

Master the Microsoft Azure platform and prepare for the AZ-304 certification exam by learning the key concepts needed to identify key stakeholder requirements a