Microsoft Sentinel in Action

Microsoft Sentinel in Action

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key FeaturesCollect, normalize, and analyze security information from multiple data sourcesIntegrate AI, machine learning, built-in and custom threat analyses, and automation to build optimal security solutionsDetect and investigate possible security breaches to tackle complex and advanced cyber threatsBook Description Microsoft Sentinel is a security information and event management (SIEM) tool developed by Microsoft that helps you integrate cloud security and artificial intelligence (AI). This book will teach you how to implement Microsoft Sentinel and understand how it can help detect security incidents in your environment with integrated AI, threat analysis, and built-in and community-driven logic. The first part of this book will introduce you to Microsoft Sentinel and Log Analytics, then move on to understanding data collection and management, as well as how to create effective Microsoft Sentinel queries to detect anomalous behaviors and activity patterns. The next part will focus on useful features, such as entity behavior analytics and Microsoft Sentinel playbooks, along with exploring the new bi-directional connector for ServiceNow. In the next part, you'll be learning how to develop solutions that automate responses needed to handle security incidents and find out more about the latest developments in security, techniques to enhance your cloud security architecture, and explore how you can contribute to the security community. By the end of this book, you'll have learned how to implement Microsoft Sentinel to fit your needs and protect your environment from cyber threats and other security issues. What you will learnImplement Log Analytics and enable Microsoft Sentinel and data ingestion from multiple sourcesTackle Kusto Query Language (KQL) codingDiscover how to carry out threat hunting activities in Microsoft SentinelConnect Microsoft Sentinel to ServiceNow for automated ticketingFind out how to detect threats and create automated responses for immediate resolutionUse triggers and actions with Microsoft Sentinel playbooks to perform automationsWho this book is for You'll get the most out of this book if you have a good grasp on other Microsoft security products and Azure, and are now looking to expand your knowledge to incorporate Microsoft Sentinel. Security experts who use an alternative SIEM tool and want to adopt Microsoft Sentinel as an additional or a replacement service will also find this book useful.

Download Now
Author
Publisher Packt Publishing Ltd
Release Date
ISBN 1801813582
Pages 478 pages
Rating 4/5 (87 users)

More Books:

Microsoft Sentinel in Action
Language: en
Pages: 478
Authors: Richard Diver
Categories: Computers
Type: BOOK - Published: 2022-02-10 - Publisher: Packt Publishing Ltd

GET EBOOK

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key Featu
Microsoft Azure Sentinel
Language: en
Pages: 208
Authors: Yuri Diogenes
Categories: Computers
Type: BOOK - Published: 2020-03-17 - Publisher: Microsoft Press

GET EBOOK

Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft's advanced cloud-based SIEM Microsoft's cloud-based Azure Sentinel helps you fully
Microsoft Sentinel in Action
Language: en
Pages: 478
Authors: Richard Diver
Categories: Cloud computing
Type: BOOK - Published: 2022 - Publisher:

GET EBOOK

Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environment Key Featu
Mastering Azure Security
Language: en
Pages: 320
Authors: Mustafa Toroman
Categories: Computers
Type: BOOK - Published: 2022-04-28 - Publisher: Packt Publishing Ltd

GET EBOOK

Get to grips with artificial intelligence and cybersecurity techniques to respond to adversaries and incidents Key FeaturesLearn how to secure your Azure cloud
Microsoft Security Operations Analyst Exam Ref SC-200 Certification Guide
Language: en
Pages: 288
Authors: Trevor Stuart
Categories: Computers
Type: BOOK - Published: 2022-03-16 - Publisher: Packt Publishing Ltd

GET EBOOK

Remediate active attacks to reduce risk to the organization by investigating, hunting, and responding to threats using Microsoft Sentinel, Microsoft Defender fo
Microsoft Azure Infrastructure Services for Architects
Language: en
Pages: 448
Authors: John Savill
Categories: Computers
Type: BOOK - Published: 2019-10-11 - Publisher: John Wiley & Sons

GET EBOOK

An expert guide for IT administrators needing to create and manage a public cloud and virtual network using Microsoft Azure With Microsoft Azure challenging Ama
Implementing Hybrid Cloud with Azure Arc
Language: en
Pages: 242
Authors: Amit Malik
Categories: Computers
Type: BOOK - Published: 2021-07-16 - Publisher: Packt Publishing Ltd

GET EBOOK

Accelerate hybrid cloud innovation using Azure Arc with the help of real-world scenarios and examples Key FeaturesGet to grips with setting up and working with
Application Delivery and Load Balancing in Microsoft Azure
Language: en
Pages: 115
Authors: Derek DeJonghe
Categories: Computers
Type: BOOK - Published: 2020-12-04 - Publisher: "O'Reilly Media, Inc."

GET EBOOK

With more and more companies moving on-premises applications to the cloud, software and cloud solution architects alike are busy investigating ways to improve l
Microsoft Azure Security Technologies (AZ-500) - A Certification Guide
Language: en
Pages: 711
Authors: Jayant Sharma
Categories: Computers
Type: BOOK - Published: 2021-10-14 - Publisher: BPB Publications

GET EBOOK

With Azure security, you can build a prosperous career in IT security. KEY FEATURES ● In-detail practical steps to fully grasp Azure Security concepts. ● Wi
Accelerate DevOps with GitHub
Language: en
Pages: 541
Authors: Michael Kaufmann
Categories: Computers
Type: BOOK - Published: 2022-09-09 - Publisher: Packt Publishing Ltd

GET EBOOK

Take your DevOps and DevSecOps game to the next level by leveraging the power of the GitHub toolset in practice Key Features Release software faster and with co