Azure Sentinel: QuickStart 1-Hr Workshop

This 1 hour workshop is for technical and business leaders and is held via Microsoft Teams video call. Workshop is promoting Azure Sentinel service, Microsoft/Office 365 connector is used just as one of many connectors available - this is NOT Office 365 offering.

Overview

• Getting to know Azure Sentinel. Microsoft 365 is just one of 25+ data connectors available in Azure Sentinel. This quick overview quickly covers other available options. Azure Sentinel makes it easy to collect security data across your entire hybrid organization from devices, users, apps, servers and any cloud, it uses the power of artificial intelligence to ensure you are identifying real threats quickly, and unleashes you from the burden of traditional SIEMs by eliminating the need to spend time on setting up, maintaining and scaling infrastructure. Since it is built on Azure, it offers limitless cloud scale and speed, scaling automatically to address your needs.

Azure Sentinel and M365 data Setup

• Covers how to configure and deploy Azure subscription, Azure Sentinel service and start collecting Microsoft 365 activity data (for free).

Analysis

• Covers how to analyze and detect threats quickly with AI on your side. For example - a compromised account leading to Microsoft 365 Mailbox exfiltration. It helps reduce noise drastically, we have seen an overall reduction of up to 90% in alert fatigue with early adopters.

Deliverables

By the end of the workshop, the client will be able to understand Azure Sentinel features and analyze Microsoft 365 activity data for possible threats.