Harnessing Dynatrace Application Security with Microsoft Sentinel for Advanced Threat
summary
Demonstrates a working Dynatrace → Microsoft Sentinel integration: a connector bringing Dynatrace attacks vulnerabilities and APM insights into Sentinel populates new log tables, KQL queries and Notebook hunting run against that data, and bundled analytics rule templates raise alerts (demo shows ~452 detected vulnerabilities). Playbooks enable automation and enrichment — for example a playbook that adds attacker IP to threat intelligence and pushes Sentinel-derived context back into Dynatrace.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 1:16Data as most valuable resource
- 3:25Modern security challenges
- 4:50Sentinel ecosystem overview
- 6:17Third-party data integration
- 7:39Microsoft security tools
- 9:28Threat hunting with KQL
- 11:20Sentinel workspace setup
- 13:34Dynatrace AppSec overview
- 15:22Dynatrace security vulnerabilities
- 17:29Dynatrace attack detection
- 18:34Combining Dynatrace and Sentinel
- 21:04Automated alerts templates
- 22:57Sentinel automation playbooks
- 24:03Installing Dynatrace solution
- 26:45Dev and security data convergence
- 28:07Querying Dynatrace in Sentinel
- 30:27Hunting with MITRE framework
- 31:28Threat indicators via playbooks
- 32:35Q&A
related talks
30mFrom Zero to a DevSecOps Hero: Extending Microsoft Sentinel
33mModernize Your Security Operations With Azure Sentinel
01h 02mAzure Identity and Security
21mModernize your security operations with Azure Sentinel
14mSonarQube & Dynatrace Integration: Enrich Security Findings
53mAzure Sentinel - Modern Day SIEM tool for SOC !
51mManaging SIEM And SOAR using Azure Sentinel
50mAutomating security monitoring