SOC Engineer Training with Azure Sentinel

Curriculum

10 Sections
20 Lessons
25 Hours

Expand all sectionsCollapse all sections

1. Introduction to Azure Sentinel
2
- 1.1
  Understanding SIEM and SOAR: Definition, importance, and Azure Sentinel’s role in modern security
- 1.2
  Azure Sentinel Features: Benefits, capabilities, and integration with Microsoft security solutions.
2. Deployment and Configuration
2
- 2.1
  Workspace Setup: Creating and configuring an Azure Sentinel workspace
- 2.2
  Initial Configuration: Basic settings, user roles, and permissions management.
3. Data Collection and Integration
2
- 3.1
  Built-in Data Connectors: Configuring and managing standard connectors.
- 3.2
  Custom Data Sources: Ingesting data from non-standard sources and using Azure Monitor.
4. Log Management and Querying
2
- 4.1
  Log Types and Collection: Understanding different log types and configuring collection.
- 4.2
  Kusto Query Language (KQL): Writing and optimizing queries for log analysis.
5. Dashboards and Visualization
2
- 5.1
  Creating Dashboards: Building custom dashboards and using built-in templates.
- 5.2
  Visualization Best Practices: Techniques for effective data visualization.
6. Incident Management and Response
2
- 6.1
  Incident Creation: Managing and investigating incidents generated from alerts.
- 6.2
  Response Tools: Using built-in tools and features for incident resolution.
7. Automation and Orchestration
2
- 7.1
  Playbooks: Designing and implementing playbooks using Azure Logic Apps
- 7.2
  Automation Rules: Setting up rules for automated responses and actions.
8. Threat Intelligence and Hunting
2
- 8.1
  Integrating Threat Intelligence: Managing threat feeds and utilizing them in queries
- 8.2
  Threat Hunting Techniques: Advanced methods for proactive threat detection.
9. Advanced Configuration and Optimization
2
- 9.1
  Performance Tuning: Best practices for optimizing data ingestion and query performance.
- 9.2
  Scaling Considerations: Strategies for managing large deployments and scaling as needed.
10. Troubleshooting and Maintenance
2
- 10.1
  Common Issues: Identifying and resolving common problems with data connectors and queries.
- 10.2
  Maintenance Practices: Routine tasks for ensuring system health and backups

This content is protected, please and enroll in the course to view this content!

Azure Sentinel Features: Benefits, capabilities, and integration with Microsoft security solutions.

Subscribe our Newsletter

Quick Links

Support

Important Links

Curriculum

Subscribe our Newsletter

Quick Links​

Support

Important Links

Login with your site account

Modal title

Quick Links