Azure Sentinel the modern SIEM system
summary
Azure Sentinel is presented as a modern SIEM built on Azure PaaS and offered with pay-as-you-go pricing to address cost, sizing and long-term performance concerns. The talk explains how Sentinel solves those issues by providing a scalable, managed security information and event management solution on Microsoft Azure.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:18Why use Azure Sentinel
- 5:14Cloud solution benefits
- 8:45Data connectors explained
- 11:13Analytics tools and rules
- 14:00Interface and live demo
- 17:54Set up data connector
- 21:11Create custom analytics rules
- 24:51Hunting tools and live stream
- 27:21Automation with playbooks
- 34:25Playbook demo and test
- 43:41Incident handling and community
- 45:25Summary
related talks
53mAzure Sentinel - Modern Day SIEM tool for SOC !
21mModernize your security operations with Azure Sentinel
46mUsing Azure Sentinel in service of protecting your systems
45mLet's talk about: Azure Sentinel
51mManaging SIEM And SOAR using Azure Sentinel
33mModernize Your Security Operations With Azure Sentinel
01h 02mAzure Identity and Security
28mWell-Architected Framework: Security