Yuri Diogenes
Microsoft Azure Sentinel
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (PDF Format)
Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft's advanced cloud-based SIEM Microsoft's cloud-based Azure Sentinel helps you fully leverage advanced AI to automate threat identification and response - without the complexity and scalability challenges of traditional Security Information and Event Management (SIEM) solutions. Now, three of Microsoft's leading experts review all it can do, and guide you step by step through planning, deployment, and daily operations. Leveraging in-the-trenches experience supporting early customers, they cover everything from configuration to data ingestion, rule development to inci…
Mehr
Beschreibung
Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft's advanced cloud-based SIEM Microsoft's cloud-based Azure Sentinel helps you fully leverage advanced AI to automate threat identification and response - without the complexity and scalability challenges of traditional Security Information and Event Management (SIEM) solutions. Now, three of Microsoft's leading experts review all it can do, and guide you step by step through planning, deployment, and daily operations. Leveraging in-the-trenches experience supporting early customers, they cover everything from configuration to data ingestion, rule development to incident management... even proactive threat hunting to disrupt attacks before you're exploited. Three of Microsoft's leading security operations experts show how to: . Use Azure Sentinel to respond to today's fast-evolving cybersecurity environment, and leverage the benefits of its cloud-native architecture . Review threat intelligence essentials: attacker motivations, potential targets, and tactics, techniques, and procedures . Explore Azure Sentinel components, architecture, design considerations, and initial configuration . Ingest alert log data from services and endpoints you need to monitor . Build and validate rules to analyze ingested data and create cases for investigation . Prevent alert fatigue by projecting how many incidents each rule will generate . Help Security Operation Centers (SOCs) seamlessly manage each incident's lifecycle . Move towards proactive threat hunting: identify sophisticated threat behaviors and disrupt cyber kill chains before you're exploited . Do more with data: use programmable Jupyter notebooks and their libraries for machine learning, visualization, and data analysis . Use Playbooks to perform Security Orchestration, Automation and Response (SOAR) . Save resources by automating responses to low-level events . Create visualizations to spot trends, identify or clarify relationships, and speed decisions . Integrate with partners and other third-parties, including Fortinet, AWS, and Palo Alto
CHF 40.60
Preise inkl. MwSt. und Versandkosten (Portofrei ab CHF 40.00)
Versandkostenfrei
Produktdetails
Weitere Autoren: Dicola, Nicholas / Trull, Jonathan
- ISBN: 978-0-13-648537-7
- EAN: 9780136485377
- Produktnummer: 36011835
- Verlag: Pearson ITP
- Sprache: Englisch
- Erscheinungsjahr: 2020
- Plattform: PDF
- Masse: 8'063 KB
- Auflage: 1. Auflage
Über den Autor
Yuri Diogenes, Senior Program Manager at Microsoft Cybersecurity Engineering's Cloud and Artificial Intelligence Division, works closely with Azure Sentinel and Azure Security Center. Also a Professor at EC-Council University's MS and BS-level Cybersecurity programs, he holds an MS in Cybersecurity Intelligence & Forensics from Utica College, an MBA from FGF in Brazil, and several industry certifications. He is co-author of Microsoft Azure Security Center, Second Edition; Enterprise Mobility Suite: Managing BYOD and Company-Owned Devices, and other Microsoft Press books. Nicholas DiCola is Principal Program Manager at Microsoft Cybersecurity Engineering's Cloud and Artificial Intelligence Division, where he assists customers in deploying advanced Microsoft Azure security systems. Before joining Microsoft in 2006, he was IT/Cyber Specialist on Active Duty in the U.S. Marine Corps. He was contributing author of Automating Active Directory Administration with PowerShell. Jonathan Trull (CSSP, CISSP, CISA, OSCP) is Global Director for the Microsoft Cybersecurity Solutions Group. He leads Microsoft's team of security advisors and cloud security architects in providing strategic direction for Microsoft security offerings and engaging with customers and partners worldwide. His 20 years of information security experience includes stints as VP and CISO for Optiv; as CISO for Qualys; and as CISO for the State of Colorado. As faculty member in Regis University's information assurance graduate program, he develops and teaches courses on network forensics, security architecture and design, malware analysis, and legal concepts in information security.
25 weitere Werke von Yuri Diogenes:
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (EPUB Format)
CHF 15.40
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (PDF Format)
CHF 45.80
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (PDF Format)
CHF 28.35
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (EPUB Format)
CHF 45.80
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (EPUB Format)
CHF 41.25
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (EPUB Format)
CHF 36.10
Planning and implementing Microsoft's cloud-native SIEM solution
Ebook (EPUB Format)
CHF 45.80
Bewertungen
0 von 0 Bewertungen
Anmelden
Keine Bewertungen gefunden. Seien Sie der Erste und teilen Sie Ihre Erkenntnisse mit anderen.