Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.
After completing this course, students will be able to:
Describe Microsoft Sentinel workspace architecture
Install Microsoft Sentinel workspace
Create and configure a Microsoft Sentinel workspace
Connect Microsoft service connectors
Explain how connectors auto-create incidents in Microsoft Sentinel
Connect Azure Windows Virtual Machines to Microsoft Sentinel
Connect non-Azure Windows hosts to Microsoft Sentinel
Configure Log Analytics agent to collect Sysmon events
Explain the importance of Microsoft Sentinel Analytics
Create rules from templates
Create new analytics rules and queries using the analytics rule wizard
Manage rules with modifications
Explain automation options in Microsoft Sentinel
Create automation rules in Microsoft Sentinel
Deploy Microsoft Sentinel Content Hub solutions and data connectors
Configure Microsoft Sentinel Data Collection rules, NRT Analytic rule and Automation
Perform a simulated attack to validate Analytic and Automation rules
As part of Lumify Group, Lumify Work has skilled more people in Microsoft technologies than any other organisation in Australia and New Zealand. We have a campus in the Philippines, too. We offer the broadest range of instructor-led training courses, from end user to architect level. We are proud to be the winner of the Microsoft MCT Superstars Award for FY24, which formally recognises us as having the highest quality Microsoft Certified Trainers in ANZ.
Security Engineers
Security Operations Analysts
Fundamental understanding of Microsoft Azure
Basic understanding of Microsoft Sentinel
Experience using Kusto Query Language (KQL) in Microsoft Sentinel
The supply of this course by Lumify Work is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.
