Well-Architected Framework: Security
summary
Microsoft says it ingests 6.5 trillion signals a day into the Intelligent Security Graph and turns them into threat intelligence fed into products like Office 365, Defender and Azure. Evidence: Azure Sentinel connectors plus an Azure Sentinel GitHub repo of detections (SolarWinds and PrintNightmare example rules) that analysts can take via a KQL copy-and-paste Raw workflow to create scheduled analytics rules; customers can author custom KQL rules, share them, and deploy fixes in hours.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:02Goals
- 2:28The Story
- 4:17Threat evolution is accelerating
- 6:36The Microsoft Intelligent Security Graph
- 10:37The Power of Cloud and Community
- 12:32Destination GitHub
- 13:19Demo: Walk-through
- 18:39Create custom analytics rules to detect threats
- 19:40Resources
related talks
21mModernize your security operations with Azure Sentinel
33mModernize Your Security Operations With Azure Sentinel
01h 02mAzure Identity and Security
51mManaging SIEM And SOAR using Azure Sentinel
53mAzure Sentinel - Modern Day SIEM tool for SOC !
30mFrom Zero to a DevSecOps Hero: Extending Microsoft Sentinel
50mAutomating security monitoring
28mData Everywhere: How Big Tech Is Digitally Transforming The Trust Model