Hands On: Azure Sentinel Cloud SIEM & SOAR

Learn Embrace first of its kind Cloud Based SIEM & SOAR making Azure different from other public cloud providers.

2.65 (30 reviews)
Udemy
platform
English
language
Network & Security
category
instructor
Hands On: Azure Sentinel Cloud SIEM & SOAR
190
students
3 hours
content
Dec 2022
last update
$49.99
regular price

What you will learn

Students will understand the first of its kind Azure cloud provisoned SAAS service called as Sentinel with complete hands on,

Ability to comprehensively implement Azure Sentinel along wit practical walkthrough and Interview preparation.

They will understand What Azure Sentinel is, how its different from other SIEM tools.

Will get thourough understanding on Data Connectors

Will be getting insight og Kusto Query Language(KQL)

Pactical hands on for Native Connector to Azure Sentinel like Azure Security Center, Azure Activity etc.

Pactical hands on for integrating external data connections like Firewall(Checkpoint,Paloalto), Antivirus(Symantec,Trendmicro)

Implementation & Administration of Syslog Server to ingest log intermediatley

Understanding Analytics Part via Investigation for various Incidents.

Handling and responding to the Incident.

Categorization of Incidents in Low,High,Medium etc and its relevance.

Understanding Playbooks,Workbooks & Logic apps

Why take this course?

Cloud based SIEM like Sentinel is the answer to the problems which are faced by mainstream SIEM tools with:

1. Efficient Automation by logic apps and playbooks.

2.Co-relation powered by Machine Learning Algorithms like Fusion.

3.Scalable with inbuilt Data Connectors and ability to design SaaS solution is always scalable.

4.Focused in noise reduction and focusing or reaching and remediation to those which can result in increase/breach of attack surface.

5.Built In the cloud .

6.Scope grows everyday hence integration of threat intel to handle them.

Screenshots

Hands On: Azure Sentinel Cloud SIEM & SOAR - Screenshot_01Hands On: Azure Sentinel Cloud SIEM & SOAR - Screenshot_02Hands On: Azure Sentinel Cloud SIEM & SOAR - Screenshot_03Hands On: Azure Sentinel Cloud SIEM & SOAR - Screenshot_04

Reviews

Vinay
September 4, 2023
No Documents attached on Videos for Better Clarification and the Audio is not clearly audible for listen.
Sanapathi
December 7, 2022
Lack of content, it may get from even google search, poor explanation, there is no words to tell that how i am disappointed, I ll do better than this. Its Very very poor, i wasted my money. Please don't encourage such kind of content less concepts. If possible refund my money please.
Scott
November 11, 2022
Presenter seems knowledgeable but sound quality is poor. There is something happening in background thats really distracting
Atul
August 27, 2021
Not much content how to create playbook or workflow. or not much information if any custom data connector
Steven
December 2, 2020
no offline material of this course such as ppt, pdf, word for reading, video & sound unclear. will request for refund.
Ajay
September 3, 2020
Most of the points mentioned were just like reading the text from the word document. While explaining, Please be creative and use your own words instead of just reading the text from the document. In KQL, you have just showed the introduction/In-built KQL queries. That cannot be hands on KQl query builder from scratch. Your course says hands on: Azure sentinel and yet it doesn't cover Hunting Queries, custom security alerts, KQL statements of those alerts. I hope I made the point for this rating.
Vinita
August 23, 2020
Yes it covers Azure sentinel constructs which are not covered or available while working in a production environment. It does cover Data Connectors for which there is no connector available from Microsoft like Imperva. In my sentinel project I used Imperva WAF and lecture on logs ingestion from Imperva WAF is a key enabler here.
Ankur
August 5, 2020
Rate of speech of the trainer was very fast. He did train on how to create Logic Apps which is the basic for SOAR. He only taught 2 Data Connectors that to only Unix based. No Windows Based Data Connectors were taught.
Waqar
August 1, 2020
Course is great, if you listen to him carefully you will get a great knowledge. He had told how to integrate and work on workspace. Highly recommended course on Sentinel. Thanks Vipul for sharing your valuable knowledge.

Charts

Price

Hands On: Azure Sentinel Cloud SIEM & SOAR - Price chart

Rating

Hands On: Azure Sentinel Cloud SIEM & SOAR - Ratings chart

Enrollment distribution

Hands On: Azure Sentinel Cloud SIEM & SOAR - Distribution chart

Related Topics

3234617
udemy ID
6/14/2020
course created date
12/20/2022
course indexed date
Bot
course submited by