Module Overview
Overview
Microsoft Sentinel offers a streamlined SIEM with AI-enhanced cloud capabilities for rapid threat detection and response. In integration with Copilot for Security and the unified SOC platform combining SIEM and XDR for end-to-end protection, Microsoft Sentinel ensures a more automated SOC, enhancing organizational security with AI and automation across the lifecycle.
Course Modules
Modules
Microsoft Sentinel basic concepts
A Unified SOC with Microsoft Sentinel streamlines cloud fundamentals, analytics, architecture, and multi-cloud data, while enabling SOAR automation, threat intelligence, MITRE ATT&CK, rules, workbooks, and DevOps CI/CD.
Planning the migration
Microsoft Sentinel migration includes workspace design, cost estimation, using solutions, writing KQL queries, and creating threat detection rules.
Microsoft Sentinel basic concepts
SIEM migration involves moving rules, automation, and data, converting dashboards to workbooks, and updating SOC processes for a smooth transition.
Post-migration optimization
Microsoft Sentinel streamlines security with threat detection, hunting, UEBA, automation via rules and playbooks, incident investigation, watchlists, and data connectors.
Optimizing SOC
Streamline SOC operations with a unified experience powered by Security Copilot and a unified platform demo. Post-migration, enable efficient multi-customer management for enhanced security operations.