Azure Sentinel is a Security Information and Event Management (SIEM) tool developed by Microsoft to integrate cloud security and artificial intelligence (AI). Azure Sentinel not only helps clients identify security issues in their environment, but also uses automation to help resolve these issues. With this book, you’ll implement Azure Sentinel and understand how it can help find security incidents in your environment with integrated artificial intelligence, threat analysis, and built-in and community-driven logic.
This book starts with an introduction to Azure Sentinel and Log Analytics. You’ll get to grips with data collection and management, before learning how to create effective Azure Sentinel queries to detect anomalous behaviors and patterns of activity. As you make progress, you’ll understand how to develop solutions that automate the responses required to handle security incidents. Finally, you’ll grasp the latest developments in security, discover techniques to enhance your cloud security architecture, and explore how you can contribute to the security community.
By the end of this book, you’ll have learned how to implement Azure Sentinel to fit your needs and be able to protect your environment from cyber threats and other security issues.
publication date
2020-04-07
what you will learn
Understand how to design and build a security operations center
Discover the key components of a cloud security architecture
Manage and investigate Azure Sentinel incidents
Use playbooks to automate incident responses
Understand how to set up Azure Monitor Log Analytics and Azure Sentinel
Ingest data into Azure Sentinel from the cloud and on-premises devices
Perform threat hunting in Azure Sentinel
key features
Secure your network, infrastructure, data, and applications on Microsoft Azure effectively * Integrate artificial intelligence, threat analysis, and automation for optimal security solutions * Investigate possible security breaches and gather forensic evidence to prevent modern cyber threats
approach
You will be taken through a setup of Azure Sentinel from configuring the Azure Monitor Log Analytics workspace to performing threat hunting activities. Along the way, you will learn about cloud security architecture, perform queries against the data, manage and investigate incidents, perform threat hunting, automatically respond to alerts, and create reports from the ingested data.
audience
This book is for solution architects and system administrators who are responsible for implementing new solutions in their infrastructure. Security analysts who need to monitor and provide immediate security solutions or threat hunters looking to learn how to use Azure Sentinel to investigate possible security breaches and gather forensic evidence will also benefit from this book. Prior experience with cloud security, particularly Azure, is necessary.
short description
Azure Sentinel is an intelligent security service from Azure where Microsoft's main focus on developing sentinel is to integrate and bring together cloud security and artificial intelligence into effect. Here readers will gain enough understanding to make the most of Azure services to secure their environment from modern cybersecurity threats.
subtitle
Integrate Azure security with artificial intelligence to build secure cloud systems
keywords
Azure cloud security, Azure penetration testing, Cloud ethical hacking, Microsoft Azure Sentinel, cloud-native SIEM solutions
Product ISBN
9781838980924
