|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/the-complete-introduction-to-azure-sentinel-siem/
课程评论：没有评论
课程名称：完整的Azure Sentinel入门课程 [SIEM] 课程概述：Azure Sentinel是一款强大且易于使用的云原生SIEM工具，旨在自动化当前各种安全分析工作。该工具能够调查各种威胁，并提供有用的仪表板，让用户获得全局视图。告别手动筛选事件的时代，迈入SIEM、SEM和SOAR的新纪元。结合最佳的机器学习算法，Azure Sentinel能够以更高的速度响应安全威胁，同时保持成本效益。 在本课程中，我们将学习Sentinel的四个关键组成部分： 1) 收集：收集来自各个来源的数据，无论是多云还是混合环境，所有数据源均可接入，甚至是本地基础设施也可以提供数据。 2) 检测：利用分析和定期查询提前检测威胁。 3) 调查：使用Kusto查询语言和机器学习调查潜在的威胁。 4) 应对：通过自动化剧本响应警报和事件，并通过自动化的Slack/邮件通知组织团队。 我们将深入理解为什么Azure Sentinel是完美的SIEM平台，并了解其功能与能力。随着你在安全/开发团队中的成长，除了使用Sentinel外，你还将采用支持云原生工具的技术，例如Grafana（用于出色的仪表板）、Slack（用于警报）和Python（用于Jupyter Notebooks）。在课程中，我们还将使用自定义规则、工作簿和书签进行调查。这些主题都将被详细讨论，以便你了解它们的用途。 课程内容资料丰富且条理清晰，便于查找所需信息。作业和测验将帮助你保持学习进度并测试知识水平。课程结合理论与实践示例，确保深入学习。
Azure Sentinel is a powerful yet easy to use cloud native SIEM tool. It is used to automate all kinds of security analysis today. Sentinel can investigate all sorts of threats along with providing you useful dashboards to get a birds eye view!Leave behind the days of manual filtering of events and step into the new age of SIEM, SEM and SOAR. When combined with the best ML algorithms, Azure Sentinel will enable you to respond to security threats at higher velocity while maintaining cost effectiveness. We will learn about the four key components of Sentinel -1)Collect: Collect data across all sources, whether you have a multi-cloud or hybrid environment, all data sources are welcome. Even your on-premises infrastructure can supply the data. 2)Detect: Detect threats using analytics and scheduled queries well in advance.3)Investigate: Investigate potential threats using Kusto Query Language and Machine Learning.4)Respond: Respond to alerts and incidents with an automated playbooks and organize your team with automated slack/email notifications.We will understand why Azure Sentinel is the perfect SIEM platform. We will learn about its features & capabilities.As you grow to become a force in the Security/Dev team, you will adopt, in addition to Sentinel, supporting technologies that compliment cloud native tools, such as Grafana (for great dashboards ), Slack (for alerting) and Python (for Jupyter Notebooks ). All in this course! We will also make use of Custom Rules, Workbooks and Bookmarks for investigations during the course. All of these topics will be talked about , so you know what they are used for.Everything is well documented and separated, so you can find what you need. Assignments and Quizzes will make sure you stay on track and test your knowledge. The course will have a combination of theory and practical examples.
