Building Microsoft Sentinel Integrations - Part 1: Onboarding

Tuesday, June 4, 2024, 12:00 PM ET / 9:00 AM PT (webinar recording date)
Microsoft Sentinel | Building Microsoft Sentinel Integrations - Part 1: Onboarding
Presenter: Eric Burkholder
Description:
This is the start of a series of webinars where we will cover everything related to creating Microsoft Sentinel integrations with other Security products. In this webinar, we will go over the scenarios to consider when building Sentinel integrations and share guidance to help you decide what scenarios make sense. Next, we will discuss the general steps to take and the various components that should be involved.
Timestamps:
00:00 - Introduction
07:03 - Solutions Demo
18:11 - Solutions - End to End User Experiences
23:55 - Contribute to Activities
29:38 - Unprocessed Events - Enabling Highlights
32:22 - If You Are Bringing Events
35:03 - If You Are Supporting Hunting
37:00 - If You Are Bringing Insights and Conclusions
39:55 - If You Have Data to Inform Investigation
43:01 - If You Have Ability to Implement Policy
44:19 - Supplying Threat Intelligence
49:35 - Next Steps, Q&A, Outro
SUBSCRIBE for new Microsoft Security videos every week.
aka.ms/SecurityCommunity/Subs...
To ensure you hear about future Microsoft Sentinel webinars and other developments, make sure you join our community by going to aka.ms/SecurityCommunity
#microsoftsentinel #ThreatIntelligence #Policy #ThreatHunting #Onboarding
#microsoftsecuritycommunity #microsoftsecuritycommunity

[@MicrosoftSecurityCommunity]

For any product related questions/feedback, please address them on the Microsoft Tech Community discussion space forum. For Microsoft Sentinel products visit techcommunity.microsoft.com/t5/microsoft-sentinel/bd-p/MicrosoftSentinel

[@tshinder]

Thanks Eric! Great presentation.

[@prasanthkumar5388]

How to inject on Prem Active Directory logs to Sentinel?