Diogenes, Yuri
Microsoft Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution (IT Best Practices - Microsoft Press)
- ISBN 13:
- 9780137900930
- author:
- Diogenes, Yuri
- format:
- Paperback / softback
- publisher:
- Addison Wesley
- language:
- English
- Publication Year:
- 2022
- Pages:
- 240
- Dimensions:
- 188mm X 99mm
- Genre:
- Computers, Server & Database, General Server,
- Condition:
- New
- Availability:
- Item usually sent within 10 working days
Description
Microsoft Azure Sentinel Planning and Implementing Microsoft's Cloud-Native SIEM Solution is a comprehensive guide to building next-generation security operations with Microsoft Sentinel. This cloud-native security information and event management (SIEM) solution automates and streamlines threat identification and response across your enterprise, helping you escape the complexity and scalability challenges of traditional solutions. With this fully updated edition, three leading experts introduce each service, explain new concepts clearly, and present proven best practices for maximizing Microsoft Sentinel's value throughout security operations. You'll learn how to review emerging challenges, unify alert detection, and use threat intelligence, machine learning, and automation to triage issues and focus on high-value tasks. This book covers the key components of Microsoft Sentinel, including architecture, design, initial configuration, and integration with other tools. It also explores advanced topics such as User and Entity Behavior Analytics (UEBA), Watchlists, Jupyter notebooks, and Playbooks, helping you create a robust security operations framework for your enterprise.