Microsoft Azure Sentinel

by ; ;
  • ISBN13:


  • ISBN10:


  • Edition: 1st
  • Format: Paperback
  • Copyright: 2020-03-30
  • Publisher: Microsoft Press
  • Purchase Benefits
  • Free Shipping On Orders Over $35!
    Your order must be $35 or more to qualify for free economy shipping. Bulk sales, PO's, Marketplace items, eBooks and apparel do not qualify for this offer.
  • Get Rewarded for Ordering Your Textbooks! Enroll Now
List Price: $39.99 Save up to $2.00
  • Buy New
    Add to Cart Free Shipping


Supplemental Materials

What is included with this book?


Using Microsoft’s cloud-based Azure Sentinel, security organizations can leverage the full power of advanced artificial intelligence to automate threat identification and response – without the management complexity and scalability challenges of conventional SIEM solutions. In Microsoft Azure Sentinel , three of Microsoft’s leading Azure Sentinel experts review the problems Azure Sentinel can solve, and guide you step-by-step through planning, deployment, and day-to-day usage. Leveraging unsurpassed expertise helping early customers succeed with Azure Sentinel, they offer the most thorough, practical, and authoritative coverage available. Topics include:
  • Understanding Azure Sentinel’s cloud-native SIEM approach, its advantages, and adoption considerations
  • Configuring workspaces and ingesting data
  • Understanding, creating, and validating Azure Sentinel analytics
  • Managing and investigating cases
  • Hunting threats and creating new queries
  • Working with Jupyter and Community Notebooks
  • Magnifying your capabilities through Playbooks and automation
  • Visualizing data and taking full advantage of Azure Sentinel dashboards
  • Integrating with partners and other third-parties, including Fortinet, AWS, and Palo Alto

Author Biography

Yuri Diogenes, Senior Program Manager at Microsoft C+AI Security CxE Team with focus on Azure Security Center and Azure Sentinel. Also a Professor at EC-Council University’s MS and BS-level Cybersecurity programs. He holds an MS in Cybersecurity Intelligence & Forensics from Utica College.


Nicolas DiCola, an IT Security Jedi, is a Principal PM Manager at Microsoft C+AI Security CxE Team. He works on Azure Security Center, Azure Sentinel, and Azure Network Security.  He is also a 20 year Reservist in the US Marine Corps working on Cyber Security.


Jonathan Trull, a longtime security practitioner and CISO, is Microsoft’s Global Director of Cybersecurity Solution Strategy for the Cybersecurity Solutions Group.  In addition to his work at Microsoft, he serves as an advisor to several security startups and venture capital firms and supports the broader security community through his work with the Cloud Security Alliance, Center for Internet Security, and IANS.

Table of Contents

Chapter 1 — Security Challenges for SecOps
• Current Threat Landscape
• Security Challenges for SecOps
• Threat Intelligence
• Cloud-native SIEM
Chapter 2 — Azure Sentinel 
• Architecture
• Adoption Considerations
• Configuring Workspace
• Data Ingestion
• Ingesting data from Microsoft solutions
Chapter 3 — Analytics 
• Understanding Analytics
• Creating Analytics
• Validating Analytics
Chapter 4 — Incident Management
• Understanding Incidents
• Incident management
• Investigation
Chapter 5 — Hunting 
• Introduction to Threat Hunting
• Hunting threats in Azure Sentinel
• Creating New Queries
Chapter 6 — Notebooks
• Understanding Jupyter Notebooks
• Leveraging Community Notebooks
• Analyzing data with Notebooks
Chapter 7 — Automation with Playbooks 
• Azure Sentinel SOAR capabilities
• Understanding Playbooks
• Creating Playbooks
• Linking playbooks to analytics
Chapter 8 — Data Visualization
• Azure Sentinel Dashboards
• Installing Dashboards
• Using Dashboards
Chapter 9 — Integrating with Partners 
• Connecting with Fortinet
• Connecting with AWS 
• Connecting with Palo Alto

Rewards Program

Write a Review