7
Learn Azure Sentinel on Microsoft Learn
source link: https://techcommunity.microsoft.com/t5/itops-talk-blog/learn-azure-sentinel-on-microsoft-learn/ba-p/2006346?WT_mc_id=DOP-MVP-4025064
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Learn Azure Sentinel on Microsoft Learn%3CLINGO-SUB%20id%3D%22lingo-sub-2006346%22%20slang%3D%22en-US%22%3ELearn%20Azure%20Sentinel%20on%20Microsoft%20Learn%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2006346%22%20slang%3D%22en-US%22%3E%3CP%3EWhy%20not%20use%20some%20of%20the%20upcoming%20days%20to%20learn%20something%20new%3F%26nbsp%3BAzure%20Sentinel%20is%20a%20scalable%2C%20cloud-native%2C%20security%20information%20event%20management%20(SIEM)%20and%20security%20orchestration%20automated%20response%20(SOAR)%20solution.%20Azure%20Sentinel%20delivers%20intelligent%20security%20analytics%20and%20threat%20intelligence%20across%20the%20enterprise%2C%20providing%20a%20single%20solution%20for%20alert%20detection%2C%20threat%20visibility%2C%20proactive%20hunting%2C%20and%20threat%20response.%26nbsp%3BTo%20get%20started%20and%20learn%20more%20about%20Azure%20Sentinel%2C%20we%20now%20have%20a%20full%20learning%20path%20on%20Microsoft%20Learn.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--557409946%22%20id%3D%22toc-hId--557409946%22%20id%3D%22toc-hId--557409946%22%20id%3D%22toc-hId--557409946%22%20id%3D%22toc-hId--557409946%22%20id%3D%22toc-hId--557409946%22%3ECloud-native%20security%20operations%20with%20Azure%20Sentinel%20Learning%20Path%20on%20Microsoft%20Learn%3C%2FH2%3E%0A%3CP%3EThis%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fpaths%2Fsecurity-ops-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Elearning%20path%3C%2FA%3E%20describes%20basic%20architecture%2C%20core%20capabilities%2C%20and%20primary%20use%20cases%20of%20its%20products.%20You'll%20also%20learn%20about%20differences%20and%20Get%20familiar%20with%20Azure%20Sentinel%2C%20a%20cloud-native%2C%20security%20information%20and%20event%20management%20(SIEM)%20service.%20This%20learning%20path%20includes%20the%20following%20modules%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fintro-to-azure-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3EIntroduction%20to%20Azure%20Sentinel%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3ETraditional%20security%20information%20and%20event%20management%20(SIEM)%20systems%20typically%20take%20a%20long%20time%20to%20set%20up%20and%20configure.%20They're%20also%20not%20necessarily%20designed%20with%20cloud%20workloads%20in%20mind.%20Azure%20Sentinel%20enables%20you%20to%20start%20getting%20valuable%20security%20insights%20from%20your%20cloud%20and%20on-premises%20data%20quickly.%20This%20module%20helps%20you%20get%20started.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fazure-sentinel-deploy-configure%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3EDeploy%20Azure%20Sentinel%20and%20connect%20data%20sources%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3EIn%20this%20course%20you'll%20learn%20how%20to%20deploy%20Azure%20Sentinel%20and%20connect%20it%20to%20data%20sources.%20You'll%20also%20learn%20how%20to%20use%20Azure%20and%20AI%20to%20provide%20analysis%20of%20security%20alerts.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fanalyze-data-in-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EThreat%20detection%20with%20Azure%20Sentinel%20analytics%3C%2FA%3E%3C%2FSTRONG%3E%3CBR%20%2F%3E%3CSPAN%3EIn%20this%20module%2C%20you%20learned%20how%20Azure%20Sentinel%20Analytics%20can%20help%20the%20SecOps%20team%20identify%20and%20stop%20cyber%20attacks.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fincident-management-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3ESecurity%20incident%20management%20in%20Azure%20Sentinel%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3EIn%20this%20module%2C%20you%20will%20investigate%20Azure%20Sentinel%20incident%20management%2C%20learn%20about%20Azure%20Sentinel%20events%20and%20entities%2C%20and%20discover%20ways%20to%20resolve%20incidents.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fhunt-threats-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3EThreat%20hunting%20with%20Azure%20Sentinel%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3EIn%20this%20module%2C%20you'll%20learn%20to%20proactively%20identify%20threat%20behaviors%20using%20Azure%20Sentinel%20queries.%20You'll%20also%20learn%20to%20use%20bookmarks%20and%20livestream%20to%20hunt%20threats.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fthreat-response-sentinel-playbooks%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3EThreat%20response%20with%20Azure%20Sentinel%20playbooks%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3EThis%20module%20describes%20how%20to%20create%20Azure%20Sentinel%20playbooks%20to%20respond%20to%20security%20threats.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fmodules%2Fquery-data-sentinel%3FWT.mc_id%3Dmodinfra-10828-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSTRONG%3EQuery%2C%20visualize%2C%20and%20monitor%20data%20in%20Azure%20Sentinel%3C%2FSTRONG%3E%3C%2FA%3E%3CBR%20%2F%3E%3CSPAN%3EThis%20module%20describes%20how%20to%20query%2C%20visualize%2C%20and%20monitor%20data%20in%20Azure%20Sentinel.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EIf%20you%20have%20any%20questions%2C%20fee%20free%20to%20leave%20a%20comment!%20With%20that%20I%20want%20to%20so%20happy%20learning%20and%20a%20good%20start%20in%20the%20new%20year%2C%20Thomas.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2006346%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Learn%20Azure%20Sentinel%20on%20Microsoft%20Learn.png%22%20style%3D%22width%3A%20533px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F242073i39D51694AF40CEF6%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Learn%20Azure%20Sentinel%20on%20Microsoft%20Learn.png%22%20alt%3D%22Learn%20Azure%20Sentinel%20on%20Microsoft%20Learn%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3ELearn%20Azure%20Sentinel%20on%20Microsoft%20Learn%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDo%20you%20want%20to%20learn%20more%20about%20Azure%20Sentinel%3F%20Check%20out%20the%20new%20learning%20path%20on%20Microsoft%20Learn.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2006346%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EThomas%20Maurer%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2014715%22%20slang%3D%22en-US%22%3ERe%3A%20Learn%20Azure%20Sentinel%20on%20Microsoft%20Learn%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2014715%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20was%20azure%20sentinal%20feature(s)%20created%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2015961%22%20slang%3D%22en-US%22%3ERe%3A%20Learn%20Azure%20Sentinel%20on%20Microsoft%20Learn%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2015961%22%20slang%3D%22en-US%22%3E%3CP%3EI%20love%20microsoft%20learning!%20Would%20like%20to%20see%20lots%20of%20questions%20in%20the%20check%20your%20knowledge%20section.%20Also%20provide%20explanation%20for%20the%20wrong%20answers%20as%20why%20they%20are%20incorrect.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Why not use some of the upcoming days to learn something new? Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution. Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. To get started and learn more about Azure Sentinel, we now have a full learning path on Microsoft Learn.
Cloud-native security operations with Azure Sentinel Learning Path on Microsoft Learn
This learning path describes basic architecture, core capabilities, and primary use cases of its products. You'll also learn about differences and Get familiar with Azure Sentinel, a cloud-native, security information and event management (SIEM) service. This learning path includes the following modules:
- Introduction to Azure Sentinel
Traditional security information and event management (SIEM) systems typically take a long time to set up and configure. They're also not necessarily designed with cloud workloads in mind. Azure Sentinel enables you to start getting valuable security insights from your cloud and on-premises data quickly. This module helps you get started. - Deploy Azure Sentinel and connect data sources
In this course you'll learn how to deploy Azure Sentinel and connect it to data sources. You'll also learn how to use Azure and AI to provide analysis of security alerts. - Threat detection with Azure Sentinel analytics
In this module, you learned how Azure Sentinel Analytics can help the SecOps team identify and stop cyber attacks. - Security incident management in Azure Sentinel
In this module, you will investigate Azure Sentinel incident management, learn about Azure Sentinel events and entities, and discover ways to resolve incidents. - Threat hunting with Azure Sentinel
In this module, you'll learn to proactively identify threat behaviors using Azure Sentinel queries. You'll also learn to use bookmarks and livestream to hunt threats. - Threat response with Azure Sentinel playbooks
This module describes how to create Azure Sentinel playbooks to respond to security threats. - Query, visualize, and monitor data in Azure Sentinel
This module describes how to query, visualize, and monitor data in Azure Sentinel.
If you have any questions, fee free to leave a comment! With that I want to so happy learning and a good start in the new year, Thomas.
2 Comments
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK