View in EDS PDF Full Text ePub Full Text

Microsoft Sentinel in Action : Architect, Design, Implement, and Operate Microsoft Sentinel As the Core of Your Security Solutions

Saved in:
Bibliographic Details
Title: Microsoft Sentinel in Action : Architect, Design, Implement, and Operate Microsoft Sentinel As the Core of Your Security Solutions
Description: Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environmentKey FeaturesCollect, normalize, and analyze security information from multiple data sourcesIntegrate AI, machine learning, built-in and custom threat analyses, and automation to build optimal security solutionsDetect and investigate possible security breaches to tackle complex and advanced cyber threatsBook DescriptionMicrosoft Sentinel is a security information and event management (SIEM) tool developed by Microsoft that helps you integrate cloud security and artificial intelligence (AI). This book will teach you how to implement Microsoft Sentinel and understand how it can help detect security incidents in your environment with integrated AI, threat analysis, and built-in and community-driven logic.The first part of this book will introduce you to Microsoft Sentinel and Log Analytics, then move on to understanding data collection and management, as well as how to create effective Microsoft Sentinel queries to detect anomalous behaviors and activity patterns. The next part will focus on useful features, such as entity behavior analytics and Microsoft Sentinel playbooks, along with exploring the new bi-directional connector for ServiceNow. In the next part, you'll be learning how to develop solutions that automate responses needed to handle security incidents and find out more about the latest developments in security, techniques to enhance your cloud security architecture, and explore how you can contribute to the security community.By the end of this book, you'll have learned how to implement Microsoft Sentinel to fit your needs and protect your environment from cyber threats and other security issues.What you will learnImplement Log Analytics and enable Microsoft Sentinel and data ingestion from multiple sourcesTackle Kusto Query Language (KQL) codingDiscover how to carry out threat hunting activities in Microsoft SentinelConnect Microsoft Sentinel to ServiceNow for automated ticketingFind out how to detect threats and create automated responses for immediate resolutionUse triggers and actions with Microsoft Sentinel playbooks to perform automationsWho this book is forYou'll get the most out of this book if you have a good grasp on other Microsoft security products and Azure, and are now looking to expand your knowledge to incorporate Microsoft Sentinel. Security experts who use an alternative SIEM tool and want to adopt Microsoft Sentinel as an additional or a replacement service will also find this book useful.
Authors: Richard Diver, Gary Bushey, John Perkins
Resource Type: eBook.
Subjects: Cloud computing--Security measures, Microsoft Azure (Computing platform)
Categories: COMPUTERS / Internet / Online Safety & Privacy
Database: eBook Collection (EBSCOhost)
FullText Links:
  – Type: ebook-pdf
  – Type: ebook-epub
Text:
  Availability: 0
Header DbId: nlebk
DbLabel: eBook Collection (EBSCOhost)
An: 3164520
RelevancyScore: 1110
AccessLevel: 6
PubType: eBook
PubTypeId: ebook
PreciseRelevancyScore: 1109.74133300781
IllustrationInfo
ImageInfo – Size: thumb
  Target: https://rps2images.ebscohost.com/rpsweb/othumb?id=NL$3164520$PDF&s=r
– Size: medium
  Target: https://rps2images.ebscohost.com/rpsweb/othumb?id=NL$3164520$PDF&s=d
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Microsoft Sentinel in Action : Architect, Design, Implement, and Operate Microsoft Sentinel As the Core of Your Security Solutions
– Name: Abstract
  Label: Description
  Group: Ab
  Data: Learn how to set up, configure, and use Microsoft Sentinel to provide security incident and event management services for your multi-cloud environmentKey FeaturesCollect, normalize, and analyze security information from multiple data sourcesIntegrate AI, machine learning, built-in and custom threat analyses, and automation to build optimal security solutionsDetect and investigate possible security breaches to tackle complex and advanced cyber threatsBook DescriptionMicrosoft Sentinel is a security information and event management (SIEM) tool developed by Microsoft that helps you integrate cloud security and artificial intelligence (AI). This book will teach you how to implement Microsoft Sentinel and understand how it can help detect security incidents in your environment with integrated AI, threat analysis, and built-in and community-driven logic.The first part of this book will introduce you to Microsoft Sentinel and Log Analytics, then move on to understanding data collection and management, as well as how to create effective Microsoft Sentinel queries to detect anomalous behaviors and activity patterns. The next part will focus on useful features, such as entity behavior analytics and Microsoft Sentinel playbooks, along with exploring the new bi-directional connector for ServiceNow. In the next part, you'll be learning how to develop solutions that automate responses needed to handle security incidents and find out more about the latest developments in security, techniques to enhance your cloud security architecture, and explore how you can contribute to the security community.By the end of this book, you'll have learned how to implement Microsoft Sentinel to fit your needs and protect your environment from cyber threats and other security issues.What you will learnImplement Log Analytics and enable Microsoft Sentinel and data ingestion from multiple sourcesTackle Kusto Query Language (KQL) codingDiscover how to carry out threat hunting activities in Microsoft SentinelConnect Microsoft Sentinel to ServiceNow for automated ticketingFind out how to detect threats and create automated responses for immediate resolutionUse triggers and actions with Microsoft Sentinel playbooks to perform automationsWho this book is forYou'll get the most out of this book if you have a good grasp on other Microsoft security products and Azure, and are now looking to expand your knowledge to incorporate Microsoft Sentinel. Security experts who use an alternative SIEM tool and want to adopt Microsoft Sentinel as an additional or a replacement service will also find this book useful.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Richard+Diver%22">Richard Diver</searchLink><br /><searchLink fieldCode="AR" term="%22Gary+Bushey%22">Gary Bushey</searchLink><br /><searchLink fieldCode="AR" term="%22John+Perkins%22">John Perkins</searchLink>
– Name: TypePub
  Label: Resource Type
  Group: TypPub
  Data: eBook.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Cloud+computing--Security+measures%22">Cloud computing--Security measures</searchLink><br /><searchLink fieldCode="DE" term="%22Microsoft+Azure+%28Computing+platform%29%22">Microsoft Azure (Computing platform)</searchLink>
– Name: SubjectBISAC
  Label: Categories
  Group: Su
  Data: <searchLink fieldCode="ZK" term="%22COMPUTERS+%2F+Internet+%2F+Online+Safety+%26+Privacy%22">COMPUTERS / Internet / Online Safety & Privacy</searchLink>
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=nlebk&AN=3164520
RecordInfo BibRecord:
  BibEntity:
    Classifications:
      – Code: 004.6782
        Scheme: ddc
        Type: prePub
    Languages:
      – Code: eng
        Text: English
    Subjects:
      – SubjectFull: Cloud computing--Security measures
        Type: general
      – SubjectFull: Microsoft Azure (Computing platform)
        Type: general
    Titles:
      – TitleFull: Microsoft Sentinel in Action : Architect, Design, Implement, and Operate Microsoft Sentinel As the Core of Your Security Solutions
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Richard Diver
      – PersonEntity:
          Name:
            NameFull: Gary Bushey
      – PersonEntity:
          Name:
            NameFull: John Perkins
      – PersonEntity:
          Name:
            NameFull: Richard Diver
      – PersonEntity:
          Name:
            NameFull: Gary Bushey
      – PersonEntity:
          Name:
            NameFull: John Perkins
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 01
              Type: published
              Y: 2022
            – D: 04
              M: 10
              Type: profile
              Y: 2022
          Identifiers:
            – Type: isbn-print
              Value: 9781801815536
            – Type: isbn-electronic
              Value: 9781801813587
          Titles:
            – TitleFull: Microsoft Sentinel in Action : Architect, Design, Implement, and Operate Microsoft Sentinel As the Core of Your Security Solutions
              Type: main
ResultId 1