Microsoft Sentinel in Action - Second Edition

If you're looking to bolster your organization's security and integrate advanced technological approaches in threat detection, "Microsoft Sentinel in Action" is the ideal guide for you. This book provides clear instructions on implementing and leveraging Microsoft Sentinel, a leading SIEM tool, to secure your environment with features like AI-driven insights and automated responses.

What this Book will help me do

• Master Log Analytics and ingest data from various sources into Microsoft Sentinel for comprehensive observability.
• Learn to write and refine KQL queries for detecting anomalies and analyzing patterns in your data.
• Develop strategies for effective threat hunting and leverage Microsoft Sentinel's analytics features.
• Integrate Microsoft Sentinel with tools like ServiceNow for enhanced incident management and response.
• Create and implement playbooks and automations in Sentinel for proactive and efficient threat resolution.

Author(s)

Richard Diver and Gary Bushey bring a robust track record in cybersecurity and cloud technology. Richard specializes in cloud security architecture, while Gary has a deep expertise in SIEM solutions and threat detection. Their combined experience offers readers actionable insights into establishing advanced security setups. Their collaboration in writing reflects a commitment to clear and practical teaching.

Who is it for?

This book is tailored for security professionals eager to dive into Microsoft Sentinel, especially those familiar with Azure and Microsoft security tools. It also serves as a resource for technical individuals looking to shift from other SIEM tools to utilizing Microsoft Sentinel. Additionally, those managing security architecture for enterprises will find invaluable guidance here.