Security: 3 Wks Azure Sentinel Implementation

As part of our Modernized Security and Defend Against Threat solutions, this is a solution for implementing Azure Sentinel. Azure Sentinel is vital for organizations as it is intelligent security analytics for your entire enterprise. It is SIEM in a modern World. Detect and respond better to threats with AI and allows your security infrastructure to scale up better to suit your needs at any time. Metro provides assessment, workshops, and implementation services. The price listed is for estimations, the actual price will depend on the final scope of work.

Areas to Cover:

• Microsoft Azure Sentinel

Benefits:

• Enable use of AI for intelligent security analytics to detect and respond to threats better
• Allow security ingrastructure to scale up are needed

Scope of Work:

• Security Assessment on current tenants (both Microsoft 365 and Azure)
• Provide sessions to overview Azure Sentinel
• Work with customer to prepare prerequisites
• On-board and enable Azure Sentinel
• Create workspace and resource group
• SOC configuration and readiness preparation for receipt of the log files/events
• Collect logs from Azure AD
• Collect logs from Azure Information Protection
• Collect logs from Microsoft 365 Defender
• Collect logs from Microsoft Cloud App Security
• Collect logs from Microsoft Defender for Endpoint
• Collect logs from Microsoft Defender for Office 365
• Tuning Log usage (Daily, Retention)
• Create analytics rule from template out-of-the-box, up to 5 rules
• Enable automated alerting on Security Incidents via email.
• Create playbook for alert email to IT Security Teams, up to 3 playbooks
• Security Admin fundamental training clases, 1 class

Deliverables:

• Assessment Reports
• Specification Documents
• Configuration Documents
• Admin Manuals

Metro Systems Corporation PCL. is one of the largest SI in Thailand. We are committed to provide Integrated service and system consulting that satisfies customers’ digital behavior.