Azure Sentinel Fundamentals -

Azure Sentinel Fundamentals

Duration: 3 Days (24 Hours)

Overview

Course Details

Prerequisites

Azure Sentinel Fundamentals Course Overview:

Welcome to the Azure Sentinel Fundamentals Course! In this comprehensive training program, you will gain the knowledge and skills needed to effectively leverage Azure Sentinel, Microsoft’s cloud-native Security Information and Event Management (SIEM) solution. Azure Sentinel empowers organizations to detect, investigate, and respond to security threats and incidents in real-time, providing robust security monitoring and threat intelligence capabilities.

Intended Audience:

Security Analysts and Engineers
IT Professionals responsible for security operations
Azure Administrators interested in enhancing cloud security
Anyone seeking to build expertise in Azure Sentinel for threat detection and respons

Learning Objectives of Azure Sentinel Fundamentals:

By the end of this course, you will:

Understand the fundamentals of Azure Sentinel, its role in cloud security, and its key features.
Learn how to set up and configure Azure Sentinel workspaces and data connectors for effective data ingestion.
Create custom workbooks and dashboards for visualizing security data and monitoring.
Configure alert rules, triggers, and automated responses to security incidents.
Master the incident management workflow, from detection to mitigation.
Explore advanced topics such as threat hunting, threat intelligence integration, and compliance reporting.
Be well-prepared for the Azure Sentinel certification exam, if desired.

Day 1: Introduction to Azure Sentinel

Session 1: Overview of Azure Sentinel
- Introduction to Azure Sentinel and its role in cloud security.
- Understanding the SIEM (Security Information and Event Management) concept.
Session 2: Setting up Azure Sentinel
- Setting up an Azure Sentinel workspace.
- Data connectors and data ingestion strategies.
- Configuring data sources for effective monitoring.

Day 2: Azure Sentinel Configuration and Incident Management

Session 3: Creating and Customizing Workbooks
- Building custom workbooks for visualizing security data.
- Using workbooks for real-time monitoring and analysis.
Session 4: Creating and Managing Alerts
- Setting up custom alert rules and triggers.
- Configuring automated responses to security incidents.
Session 5: Incident Management Workflow
- Understanding the incident lifecycle.
- Hands-on practice: Detecting, investigating, and mitigating security incidents using Azure Sentinel.

Day 3: Advanced Azure Sentinel Topics

Session 6: Threat Hunting
- Proactive threat hunting techniques.
- Leveraging KQL (Kusto Query Language) for advanced threat hunting.
Session 7: Threat Intelligence Integration
- Incorporating threat intelligence feeds.
- Enhancing threat detection and response with external intelligence.
Session 8: Compliance and Reporting
- Ensuring compliance with Azure Sentinel.
- Generating reports for auditing and compliance purposes.
Session 9: Hands-On Workshop and Certification Exam Preparation
- Comprehensive hands-on workshop to reinforce learning.
- Preparing for the Azure Sentinel certification exam.
Session 10: Course Conclusion and Q&A
- Recap of key learnings.
- Open Q&A session for addressing participant queries.

Azure Sentinel Fundamentals Course Prerequisites:

To make the most of this course, participants should have:

Basic knowledge of cloud computing concepts and Microsoft Azure fundamentals.
Familiarity with security and networking fundamentals.
A Windows or Azure subscription (for hands-on labs).
A laptop or desktop with internet access and a modern web browser.

Discover the perfect fit for your learning journey

Choose Learning Modality

Live Online

Convenience
Cost-effective
Self-paced learning
Scalability

Classroom

Interaction and collaboration
Networking opportunities
Real-time feedback
Personal attention

Onsite

Familiar environment
Confidentiality
Team building
Immediate application

Training Exclusives

This course comes with following benefits:

Practice Labs.
Get Trained by Microsoft Certified Trainers (MCT).
Access to the recordings of your class sessions for 90 days.
Digital courseware
Experience 24*7 learner support.

Request Free Demo

Got more questions? We’re all ears and ready to assist!