Azure Sentinel Monitoring PoC

Zenith&Company

์ œ๋กœ ํŠธ๋Ÿฌ์ŠคํŠธ ํ™˜๊ฒฝ๊ณผ ์ •์˜์— ๋ถ€ํ•ฉํ•˜๋Š” ํด๋ผ์šฐ๋“œ ํ•ต์‹ฌ ๋ณด์•ˆ ๋ชจ๋‹ˆํ„ฐ๋ง ํ™˜๊ฒฝ, ํ†ตํ•ฉ ๋ถ„์„์„ ์œ„ํ•œ ์ตœ์†Œํ•œ์˜ ๋ณด์•ˆ ๋ชจ๋ธ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. [Korean Only]

[Korean supported only] [๋‹น์‚ฌ Azure ๊ณ„์•ฝ ๊ณ ๊ฐ ๋ฌด์ƒ ์ง„ํ–‰] SIEM ์ •์˜: ๊ธฐ์—…์˜ ์—ฌ๋Ÿฌ ์›๋ณธ์—์„œ ์ด๋ฒคํŠธ ๋กœ๊ทธ ๋ฐ์ดํ„ฐ๋ฅผ ์ˆ˜์ง‘ํ•˜๊ณ  ๋ณด์•ˆ ์œ„ํ˜‘์„ ํƒ์ง€, ๋ถ„์„, ๋Œ€์‘ํ•˜๋Š” ์†”๋ฃจ์…˜ ๊ธฐ๋Šฅ:

  1. ์—ฌ๋Ÿฌ ์›๋ณธ์—์„œ ์ด๋ฒคํŠธ ๋กœ๊ทธ ๋ฐ์ดํ„ฐ๋ฅผ ์ˆ˜์ง‘
  2. ๋กœ๊ทธ ๊ธฐ๋ฐ˜ ์‹ค์‹œ๊ฐ„ ๋ถ„์„
  3. ์ •์ƒ์ ์ธ ๋ฒ”์œ„๋ฅผ ๋ฒ—์–ด๋‚˜๋Š” ํ™œ๋™์„ ์‹๋ณ„ํ•˜์—ฌ ์ ์ ˆํ•œ ์กฐ์น˜

SIEM, XDR์„ ํ†ตํ•œ ์ตœ์‹  ๊ณต๊ฒฉ ๋ฐฉ์–ด -Micrsoft Defender for Cloud์™€ Microsoft 365 Defender๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ํด๋ผ์šฐ๋“œ์™€ End Point ์‚ฌ์šฉ์ž๋ฅผ ๋ณดํ˜ธ -Microsoft Sentinel์„ ์‚ฌ์šฉํ•˜์—ฌ ์ „์ฒด ์กฐ์ง์˜ ์œ„ํ˜‘์„ ํƒ์ง€ํ•˜๊ณ  ์ž๋™ํ™”๋ฅผ ํ†ตํ•œ ์‹ ์†ํ•œ ๋Œ€์‘

PoC ์ง„ํ–‰ ์ ˆ์ฐจ ๋ณด์•ˆ ๋ชจ๋‹ˆํ„ฐ๋ง์€ ์ˆ˜์ง‘ ๋Œ€์ƒ ์„ ์ •, ๋กœ๊ทธ ๋ถ„์„์„ ํ†ตํ•œ ํƒ์ง€, ํ†ตํ•ฉ ๋ถ„์„ ํ™˜๊ฒฝ์„ ์ œ๊ณตํ•˜๋Š” 3๋‹จ๊ณ„ ์ ˆ์ฐจ๋กœ ์ง„ํ–‰ํ•ฉ๋‹ˆ๋‹ค.

์ฒญ๊ตฌ์˜ˆ์ƒ๋น„์šฉ ๋‹น์‚ฌ Azure ๊ณ„์•ฝ ๊ณ ๊ฐ ๋ฌด์ƒ ์ง„ํ–‰ Azure ๋น„๊ณ„์•ฝ ๊ณ ๊ฐ ์ •๊ฐ€ 800๋งŒ์› *Azure ๋น„์šฉ: Sentinel ๋ฌด๋ฃŒ ํ‰๊ฐ€ํŒ ๋ฒ”์œ„๋‚ด ๋ฌด์ƒ์ง„ํ–‰. 1๊ฐœ์›” ์ด๋‚ด. 1์ผ ์ตœ๋Œ€ ๋กœ๊ทธ 10GB

https://store-images.s-microsoft.com/image/apps.33080.41bf5e37-f685-4057-b345-1fef2777f71b.164461fe-c519-4824-93ab-ebb9fd1882c4.1d1226c0-8ac9-4585-b605-6882e01783d9
https://store-images.s-microsoft.com/image/apps.33080.41bf5e37-f685-4057-b345-1fef2777f71b.164461fe-c519-4824-93ab-ebb9fd1882c4.1d1226c0-8ac9-4585-b605-6882e01783d9
https://store-images.s-microsoft.com/image/apps.37078.41bf5e37-f685-4057-b345-1fef2777f71b.164461fe-c519-4824-93ab-ebb9fd1882c4.3febf21b-83a3-4fd5-b4bc-8ddfea31f253
https://store-images.s-microsoft.com/image/apps.8109.41bf5e37-f685-4057-b345-1fef2777f71b.164461fe-c519-4824-93ab-ebb9fd1882c4.b41a2a64-b2c5-4a02-9e77-faa4d8c4ddcf
https://store-images.s-microsoft.com/image/apps.45436.41bf5e37-f685-4057-b345-1fef2777f71b.164461fe-c519-4824-93ab-ebb9fd1882c4.3a02c930-f4e5-4d3c-a142-c1c593ac45a9