Azure - Automation and Log Analytics

Azure automation lets you create an automation account to run on-demand or scheduled scripts, store reusable assets like variables and credentials, and manage runbooks for automated tasks.

Create and configure an Azure automation account, assign it to a resource group and region, set run as accounts for ARM and classic modes, and explore inventory and update management.

Discover how to configure automation assets such as modules, credentials, connections, and variables to support run books and hybrid worker processes, enabling secure, reusable automation.

Create a graphical or textual runbook in the Azure automation account, configure credentials and parameters, connect to Azure, and run on schedule or on demand to manage virtual machines.

Use log analytics to monitor azure and on-premises resources by creating an oms workspace, collecting data with agents, and analyzing it via dashboards, searches, and solutions.

Create and view a Log Analytics OMS workspace in the Azure portal, choose region and pricing, install the agent with the workspace ID and primary key, and add monitoring solutions.

Activate Azure Security Center to gain a unified view of security across Azure, on premises, and other clouds, using adaptive threat prevention, machine learning, and intelligent detection and response.

Explore detection as a service in Azure Security Center, with up-to-date threat intelligence from global data, automatic updates, and automatic scaling that detects and alerts ransomware quickly with no maintenance.

Discover Azure security center in the portal, review the overview, explore prevention and detection, and learn to use just-in-time access and recommendations to harden internet-facing resources.

Investigate incidents in Azure Security Center, reviewing alerts and impacted devices. Automate responses with runbooks and automation accounts, including remediation steps and containment actions.

Azure automation and log analytics, including automation accounts, run books (graphical and script-based), credentials, certificates, and variables. Examine workspaces, solutions, Azure Security Center detections, investigations, and automated responses to threats.