MicrosoftAzure Sentinel:3Week Workshop

Energy Time offer you Workshop on how to use Microsoft Azure Sentinel.

Azure Sentinel is Cloud-born SIEM system which deployed in Microsoft Azure platform. We'll provide you with Microsoft Azure subscription to connect Azure Sentinel to your Tenant (Microsoft 365 services, Microsoft Azure services)

With Azure Sentinel you'll gain visibility on all security events within your Microsoft Tenant and On-premises services.

We'll use the next Data Connectors: Azure AD Sign-in/Audit Logs, Office 365 Logs, Microsoft Defender, Windows Server Security events, Syslog

Workshop plan: 1Week: Analyze customer requirements and priorities for a SIEM deployment 2Week: Define scope & deploy Azure Sentinel in customer production environment 3Week: Discover Threat and how to automate responses, Recommend next steps joint session