Modernize your security operations with Azure Sentinel
summary
Azure Sentinel is a cloud-native SIEM that ingests and analyzes cloud and on‑prem security telemetry at Microsoft scale, claims 76% of organizations see rising security data volume, and offers built‑in AI and fusion models to reduce false positives and surface anomalies. It links with Microsoft Defender and external feeds, enables proactive hunting with Kusto queries, visualizes relationships via an investigation graph, and automates triage and response using automation playbooks and community analytics hosted on GitHub.
AI-written summary · about
chapters (7)
- 0:00Modernizing security ops
- 1:34Data growth and talent gaps
- 3:33AI and automation potential
- 5:37Advanced security intelligence
- 10:47Threat hunting and analysis
- 13:30Automating investigations
- 16:10Product demo and conclusion
related talks
53mAzure Sentinel - Modern Day SIEM tool for SOC !
51mManaging SIEM And SOAR using Azure Sentinel
48mAzure Sentinel the modern SIEM system
46mUsing Azure Sentinel in service of protecting your systems
45mLet's talk about: Azure Sentinel
28mWell-Architected Framework: Security
30mFrom Zero to a DevSecOps Hero: Extending Microsoft Sentinel
36mHarnessing Dynatrace Application Security with Microsoft Sentinel for Advanced Threat