Deploy Azure Sentinel in a corporate environment (EN)

Description

Get to know Azure Sentinel and find out how to avoid or solve any problems associated with the deployment of Azure Sentinel.

We will deploy Azure Sentinel and the entire Azure Security Stack, services that are natively supported by Azure Sentinel. During the training we will show you what to avoid, how to work with the tool and how to integrate data sources (for example from your Powershell or Python scripts). Together we will create correlation rules, try to touch the attack detection and find out the speed of response and detection with the Azure Sentinel system, which is not only Cloud Based SIEM, but also SOAR (a tool for orchestration of remediation detection in your cloud or local environment). The advantage of the training is that the theoretical part makes up only 25% of the training and the rest are practical demonstrations and hand-on exercises in which you will learn to work with the Azure Sentinel. 

Goals

Target

Contents

• Deploy Azure Sentinel
• Deploy Azure Security Stack
• What to avoid, how to work with the tool
• How to integrate data sources (eg from Powershell, Python scripts)
• Creating correlation rules
• Attack detection
• Response rate detection and detection with Azure Sentinel
• Practical examples of hand-on exercises 

Prerequisites

Study Materials