Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Hands On: Azure Sentinel Cloud SIEM & SOAR
Rating: 2.6 out of 5(32 ratings)
225 students

Hands On: Azure Sentinel Cloud SIEM & SOAR

Learn Embrace first of its kind Cloud Based SIEM & SOAR making Azure different from other public cloud providers.
Created byVipul Dabhi
Last updated 10/2025
English

What you'll learn

  • Students will understand the first of its kind Azure cloud provisoned SAAS service called as Sentinel with complete hands on,
  • Ability to comprehensively implement Azure Sentinel along wit practical walkthrough and Interview preparation.
  • They will understand What Azure Sentinel is, how its different from other SIEM tools.
  • Will get thourough understanding on Data Connectors
  • Will be getting insight og Kusto Query Language(KQL)
  • Pactical hands on for Native Connector to Azure Sentinel like Azure Security Center, Azure Activity etc.
  • Pactical hands on for integrating external data connections like Firewall(Checkpoint,Paloalto), Antivirus(Symantec,Trendmicro)
  • Implementation & Administration of Syslog Server to ingest log intermediatley
  • Understanding Analytics Part via Investigation for various Incidents.
  • Handling and responding to the Incident.
  • Categorization of Incidents in Low,High,Medium etc and its relevance.
  • Understanding Playbooks,Workbooks & Logic apps

Course content

9 sections • 22 lectures • 6h 15m total length

  • Azure Sentinel Implementation & Administration13:08
  • Why Azure Sentinel7:27
  • Hands On: Adding Azure Sentinel To Log Analytics Workspace & Walkthrough12:12
  • Hands On: Kusto Query Language (KQL)10:29
  • Creating Sentinel Data Source & Discussing Pricing Of Azure Sentinel10:38
  • Hands On: Checkpoint Data Connector for Ingesting Checkpoint Logs18:27
  • Hands On : If You Encounter A Bad Sentinel Design15:57
  • Integrating Trendmicro Antivirus Part 16:06
  • Hands On: Integrating Trendmicro Antivirus uisng Azure Function Part 22:54
  • Azure Sentinel Architecture Design Consideration10:18
  • Azure Sentinel SOAR Capabilities9:04

Requirements

  • This course is complete bundle in itself around Implementation & Administration of Azure Sentinel.
  • Some Background in SIEM & SOAR,
  • AZ-900 & AZ-500 which is Azure fundamentals & Azure Security Specialisation will be helpful to make most out of this course.

Description

Cloud based SIEM like Sentinel is the answer to the problems which are faced by mainstream SIEM tools with:

1. Efficient Automation by logic apps and playbooks.

2.Co-relation powered by Machine Learning Algorithms like Fusion.

3.Scalable with inbuilt Data Connectors and ability to design SaaS solution is always scalable.

4.Focused in noise reduction and focusing or reaching and remediation to those which can result in increase/breach of attack surface.

5.Built In the cloud .

6.Scope grows everyday hence integration of threat intel to handle them.

Who this course is for:

  • Cloud Security Professionals
  • Cyber Security Professionals
  • SOC Managers
  • SOC Operations
  • SIEM & SOAR
  • Cloud SIEM

Report abuse