Learn Live - Microsoft Sentinel Fundamentals

แชร์
ฝัง
  • เผยแพร่เมื่อ 21 พ.ย. 2024
  • Full series information: aka.ms/learnli...
    More info here: aka.ms/learnli...
    To provide a guide in logically executing a Microsoft Sentinel Deployment and to highlight some of the key components through demonstration.
    ---------------------
    Learning objectives
    Explain Microsoft Sentinel Cost
    Discuss Architectual considerations with Microsoft Sentinel
    Demonstrate how to collect Alerts from Microsoft security products into Microsoft Sentinel for single pane of glass view
    Unify Security Tools to talk to each other include third party data connectors and solutions from Content Hub.
    Create visualization of data using Workbooks
    Demonstrate and talk through Microsoft Sentinel features through the Collect, Detect, Investigate and Respond process leveraging User Entity Behavior Analytics (UEBA)
    ---------------------
    Chapters
    --------
    00:11 - Welcome and Introduction
    01:41 - Learning Materials and Links
    02:17 - Learning Objectives
    03:52 - Sentinel Phase 1: Collect
    04:34 - Sentinel Architecture Design Considerations
    07:48 - Sentinel Cost and Pricing
    11:27 - Log Analytics Walkthrough - Estimated Cost and Retention
    15:09 - Sentinel GitHub and All-in-One Deployment Tool
    18:16 - Key Checkpoints in Sentinel Set-up
    22:36 - Sentinel Roles and Permissions
    25:07 - Content Hub Discussion
    29:11 - Data Connectors and Data Ingestion
    39:55 - Sentinel Phase 2: Detect
    41:55 - User Entity Behavior Analytics and Analytic Rules
    47:02 - Out-of-the-box Native and Third-Party Data Source Analytic Rules
    51:39 - MITRE Attack Panel - Using it to Choose Analytic Rules
    1:03:04 - Sentinel Phase 3: Incident and Alert Investigation
    1:10:07 - Incident Enrichment
    1:11:41 - Incident Actions and Tasks
    1:14:20 - Entity Investigation
    1:19:34 - Sentinel Phase 4: Respond
    1:20:08 - Watchlists
    1:21:07 - Playbooks
    1:25:15 - Automation Rules
    1:28:11 - Questions and Conclusion
    ---------------------
    Presenters
    Andre Murrell
    Azure Customer Engineer
    Microsoft
    LinkedIn: / andre-murrell
    Simona Kovatcheva
    Senior Cloud Security Engineer
    Microsoft
    LinkedIn: / simona-kovatcheva
    Moderators
    Rudnei Oliveira
    Senior Customer Engineer
    Microsoft
    LinkedIn: / rudnei-oliveira-69443523

ความคิดเห็น • 4

  • @Michael-ok1fe
    @Michael-ok1fe 6 หลายเดือนก่อน

    This was in the top 3 most informative webinar videos I've found, Thank you!

  • @seimseim-l5t
    @seimseim-l5t ปีที่แล้ว

    Need more such videos, thanks for the initiative.

  • @RalphieRoper
    @RalphieRoper ปีที่แล้ว

    Great video. Thank you.