Azure Sentinel is a next-generation, cloud-native security information & event management (SIEM) system that provides real-time analysis of security alerts generated for cloud and on-premises resources. Sentinel effectively detects threats while automating threat response using orchestration and built-in or custom security playbooks.
In Azure Sentinel training course, you will learn the implementation and configuration of Azure Sentinel, discover how to connect key services and threat intelligence resources to Sentinel; investigate cases; create security playbooks to set automated threat responses to issues; and leverage search and query tools to hunt for threats.
By attending Azure Sentinel workshop, delegates will learn:
- Onboarding Azure Sentinel
- Connecting Microsoft and third-party services
- Connecting to threat intelligence resources
- Detecting suspicious activities
- Investigating cases
- Responding to threats
- Hunting for security threats in your environment