Azure Identity and Security
summary
Demonstrates using Azure Sentinel together with Azure ATP and a Log Analytics workspace to ingest logs from Windows, Linux, Office 365 and third‑party connectors, apply ML rules and correlate incidents to reduce false positives by ~80–90% and enable automated response. Shows a deployable lab (10–15 minutes) with full incident graphing and investigation flow that traces compromised domain controllers, lateral movement and credential theft, with retention up to 720 days and sample datasets/Jupyter notebooks for testing.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:11Agenda
- 15:09What is a SIEM? And SOAR?
- 20:05What is Azure Sentinel?
- 54:47Explore and learn all of Sentinel's functionalities?
- 56:05Option B
related talks
53mAzure Sentinel - Modern Day SIEM tool for SOC !
51mManaging SIEM And SOAR using Azure Sentinel
28mWell-Architected Framework: Security
46mUsing Azure Sentinel in service of protecting your systems
36mHarnessing Dynatrace Application Security with Microsoft Sentinel for Advanced Threat
50mAutomating security monitoring
30mFrom Zero to a DevSecOps Hero: Extending Microsoft Sentinel
48mAutomate(d) security with Azure Security Center