Learn Live - Configure your Microsoft Sentinel environment

From the creator

Full series information: https://aka.ms/learnlive-post-ignite-22 More info here: https://aka.ms/learnlive-post-ignite-22-Ep4 Follow on Microsoft Learn: - Complete the Learn module: https://aka.ms/learnlive-20221027A - Complete the Learn module (2): https://aka.ms/learnlive-20221027A2 Traditional security information and event management (SIEM) systems typically take a long time to set up and configure. They're also not necessarily designed with cloud workloads in mind. Microsoft Sentinel enables you to start getting valuable security insights from your cloud and on-premises data quickly. This module helps you get started. Then you will learn about the architecture of Microsoft Sentinel workspaces to ensure you configure your system to meet your organization's security operations requirements. --------------------- Learning objectives - Identify the various components and functionality of Microsoft Sentinel. - Identify use cases where Microsoft Sentinel would be a good solution. - Describe Microsoft Sentinel workspace architecture - Install Microsoft Sentinel workspace - Manage a Microsoft Sentinel workspace --------------------- Chapters -------- 00:00 - Introduction 01:58 - Learning objectives 02:29 - What is security information and event management? 04:00 - What is Microsoft Sentinel 05:58 - How Microsoft Sentinel works 06:29 - Data connectors 09:11 - Querying and log retention 13:23 - Analytics rules 17:13 - Incidents and investigations 21:16 -

Published 2022-10-27 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.