{"product_id":"microsoft-sentinel-planning-and-implementing-microsofts-cloud-native-siem-solution-9780137900930","title":"Microsoft Sentinel: Planning and Implementing Microsoft's Cloud-Native Siem Solution","description":"\u003cp\u003e • Author(s): Yuri Diogenes\u003cbr\u003e • Publisher: Microsoft Press\u003cbr\u003e • Publisher Imprint: Microsoft Press\u003cbr\u003e • BISAC: Operating Systems - Windows Server\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eBuild next-generation security operations with Microsoft Sentinel\u003c\/strong\u003e\u003c\/p\u003e \u003cp\u003eMicrosoft Sentinel is the scalable, cloud-native, security information and event management (SIEM) solution for automating and streamlining threat identification and response across your enterprise. Now, three leading experts guide you step-by-step through planning, deployment, and operations, helping you use Microsoft Sentinel to escape the complexity and scalability challenges of traditional solutions. Fully updated for the latest enhancements, this edition introduces new use cases for investigation, hunting, automation, and orchestration across your enterprise and all your clouds. The authors clearly introduce each service, concisely explain all new concepts, and present proven best practices for maximizing Microsoft Sentinel's value throughout security operations.\u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e\u003cstrong\u003eThree of Microsoft's leading security operations experts show how to: \u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e \u003cli\u003eReview emerging challenges that make better cyberdefense an urgent priority\u003c\/li\u003e \u003cli\u003eSee how Microsoft Sentinel responds by unifying alert detection, threat visibility, proactive hunting, and threat response\u003c\/li\u003e \u003cli\u003eExplore components, architecture, design, and initial configuration\u003c\/li\u003e \u003cli\u003eIngest alerts and raw logs from all sources you need to monitor\u003c\/li\u003e \u003cli\u003eDefine and validate rules that prevent alert fatigue\u003c\/li\u003e \u003cli\u003eUse threat intelligence, machine learning, and automation to triage issues and focus on high-value tasks\u003c\/li\u003e \u003cli\u003eAdd context with User and Entity Behavior Analytics (UEBA) and Watchlists\u003c\/li\u003e \u003cli\u003eHunt sophisticated new threats to disrupt cyber kill chains before you're exploited\u003c\/li\u003e \u003cli\u003eEnrich incident management and threat hunting with Jupyter notebooks\u003c\/li\u003e \u003cli\u003eUse Playbooks to automate more incident handling and investigation tasks\u003c\/li\u003e \u003cli\u003eCreate visualizations to spot trends, clarify relationships, and speed decisions\u003c\/li\u003e \u003cli\u003eSimplify integration with point-and-click data connectors that provide normalization, detection rules, queries, and Workbooks\u003c\/li\u003e \u003c\/ul\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e\u003cstrong\u003eAbout This Book\u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e \u003cli\u003eFor cybersecurity analysts, security administrators, threat hunters, support professionals, engineers, and other IT professionals concerned with security operations\u003c\/li\u003e \u003cli\u003eFor both Microsoft Azure and non-Azure users at all levels of experience\u003c\/li\u003e \u003c\/ul\u003e","brand":"Microsoft Press","offers":[{"title":"Paperback","offer_id":45033059188887,"sku":"9780137900930","price":3139.0,"currency_code":"INR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0666\/3471\/1191\/files\/9780137900930.webp?v=1769208955","url":"https:\/\/atlanticbooks.com\/products\/microsoft-sentinel-planning-and-implementing-microsofts-cloud-native-siem-solution-9780137900930","provider":"Atlantic Books","version":"1.0","type":"link"}