Mastering Microsoft Sentinel – SIEM & SOAR
-
Chapter 1: Understanding the Security Operations Center
-
Chapter 2: Introduction to SIEM
-
Lecture 2.1Introduction to SIEM (Security Information and Event Management)
-
-
Chapter 3: Introduction to SOAR
-
Lecture 3.1Introduction to SOAR (Security Orchestration, Automation, and Response)
-
-
Chapter 4: Introduction to Microsoft Sentinel
-
Lecture 4.1Introduction to Microsoft Sentinel
-
-
Chapter 5: Setting Up Microsoft Sentinel
-
Lecture 5.1Setting Up Microsoft Sentinel
-
-
Chapter 6: Data Sources and Connectors
-
Lecture 6.1Data Sources and Connectors
-
-
Chapter 7: Azure Firewall connector for Sentinel
-
Lecture 7.1Azure Firewall connector for Sentinel
-
-
Chapter 8: Configuring syslog server
-
Lecture 8.1Configuring syslog server
-
-
Chapter 9: Kusto Query Language (KQL)
-
Lecture 9.1Kusto Query Language (KQL)
-
-
Chapter 10: Analytics rules
-
Lecture 10.1Analytics rules
-
-
Chapter 11: Simulating a Brute Force Attack
-
Lecture 11.1Simulating a Brute Force Attack & Investigating with Sentinel
-
-
Chapter 12: Automation Rule
-
Lecture 12.1Automation Rule
-
-
Chapter 13: PlayBooks
-
Lecture 13.1PlayBooks
-