Threat Protection and Incident Response with Microsoft Sentinel
Duration : 12 Hours
Overview
Microsoft Sentinel is your bird's-eye view across the enterprise alleviating the stress of increasingly sophisticated attacks, increasing volumes of alerts, and long resolution time frames. In this training you will learn how to deploy and connect this SIEM and SOAR solution to different data sources. You will learn how to use intelligent security analytics and threat intelligence capabilities for attack detection, threat visibility, proactive hunting, and threat response.
Modules
.png?lmsauth=4de36b984dd459806ba9ca746d20a06499ab1538)
Deploying and configuring Microsoft Sentinel
In this module, Learn to Design your Microsoft Sentinel workspace architecture, Manage roles and permissions, Enable data connectors using a content hub, Deploy a log forwarder to ingest Syslog and CEF logs to Microsoft Sentinel, Understand security coverage by the MITRE ATT&CK® framework, Connect Microsoft Sentinel to Amazon Web Services to ingest AWS service log data and AWS S3 connector – architecture overview.
.png?lmsauth=c90c8c25261a7a6c08a991c138dfd9e62eeccea1)
Threat Intelligence and Investigation
In this module, you will learn about Introduction to Microsoft content hub solutions, Introduction to Threat Intelligence in Microsoft Sentinel, connect your threat intelligence platform to Microsoft Sentinel, Work with threat indicators, Detect Threat and Analyse Data, investigating incidents and Using Workbooks to investigate threats.
.png?lmsauth=d128acc28c330bbdc27bb8f5580809d4f58c5781)
Identify advanced threats with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel
In this module, you will learn about Introduction to User and Entity Behavior Analytics (UEBA), UEBA analytics architecture, Enable UEBA, Anomalies detected by UEBA, Querying UEBA, Investigating with UEBA.
.png?lmsauth=b724fc1fee333657094a628b1a8a4d0d49272569)
Automating responses in Microsoft Sentinel and integration with Microsoft Defender Solutions
In this module, you will learn about Introduction to SOAR in Microsoft Sentinel, Creating and working with Automation Rules, Automation with Playbooks, Azure Logic Apps, Customizing Microsoft Sentinel playbooks from templates, Bring Your own Machine Learning platform, Integration with Microsoft 365 Defender and Integration with Microsoft Defender for Cloud
.png?lmsauth=e779e02438f379d22dadc2f6f1cc7adadba2cc8d)
Post-training Skills Assessment
Take this assessment to validate your skills gathered from the self-paced online learning course completed in this course to mark your completion.
.png?lmsauth=fbb39ff504fda7e957c100c012a8d6311296d9c4)
Course Completion Survey
Share your feedback with us regarding your experience!
.png?lmsauth=accb3dc05cd1a90b86b01d67154839d965bed08b)
Advanced
-
Self paced
Style -
Technical Project Ready with Labs
Target
Audience -
No
Certification Course -
Yes
Hands on
Labs
Solution Areas
Security, Modern Sec Ops