Diogenes, Yuri Dicola, Nicholas Trull, Jonathan Microsoft azure sentinel 9780136485452

Варианты приобретения

Цена: 4830.00р.
Кол-во:
о цене
Наличие: Отсутствует. Возможна поставка под заказ.

При оформлении заказа до: 2025-08-04
Ориентировочная дата поставки: Август-начало Сентября
При условии наличия книги у поставщика.

Добавить в корзину

в Мои желания

Автор: Diogenes, Yuri Dicola, Nicholas Trull, Jonathan
Название: Microsoft azure sentinel
ISBN: 9780136485452
Издательство: Pearson Education
Издательство: Pearson education (us)
Классификация:

Windows и модификации

Облачные вычисления

Безопасность работы в компьютерных сетях

ISBN-10: 0136485456
Обложка/Формат: Paperback
Страницы: 208
Вес: 0.36 кг.
Дата издания: 30.03.2020
Серия: It best practices - microsoft press
Язык: English
Размер: 188 x 231 x 15
Читательская аудитория: Professional & vocational
Подзаголовок: Planning and implementing microsoft`s cloud-native siem solution
Рейтинг:
Поставляется из: Англии
Описание: Microsoft Azure Sentinel

Plan, deploy, and operate Azure Sentinel, Microsofts advanced cloud-based SIEM

Microsofts cloud-based Azure Sentinel helps you fully leverage advanced AI to automate threat identification and response - without the complexity and scalability challenges of traditional Security Information and Event Management (SIEM) solutions. Now, three of Microsofts leading experts review all it can do, and guide you step by step through planning, deployment, and daily operations. Leveraging in-the-trenches experience supporting early customers, they cover everything from configuration to data ingestion, rule development to incident management... even proactive threat hunting to disrupt attacks before youre exploited.

Three of Microsofts leading security operations experts show how to:

- Use Azure Sentinel to respond to todays fast-evolving cybersecurity environment, and leverage the benefits of its cloud-native architecture

- Review threat intelligence essentials: attacker motivations, potential targets, and tactics, techniques, and procedures

- Explore Azure Sentinel components, architecture, design considerations, and initial configuration

- Ingest alert log data from services and endpoints you need to monitor

- Build and validate rules to analyze ingested data and create cases for investigation

- Prevent alert fatigue by projecting how many incidents each rule will generate

- Help Security Operation Centers (SOCs) seamlessly manage each incidents lifecycle

- Move towards proactive threat hunting: identify sophisticated threat behaviors and disrupt cyber kill chains before youre exploited

- Do more with data: use programmable Jupyter notebooks and their libraries for machine learning, visualization, and data analysis

- Use Playbooks to perform Security Orchestration, Automation and Response (SOAR)

- Save resources by automating responses to low-level events

- Create visualizations to spot trends, identify or clarify relationships, and speed decisions

- Integrate with partners and other third-parties, including Fortinet, AWS, and Palo Alto

Microsoft azure sentinel, Diogenes, Yuri Dicola, Nicholas Trull, Jonathan