A comprehensive technical guide to Microsoft Sentinel, covering deployment, data connectors, analytics rules, threat hunting, automation, and incident response for security operations teams.
Chapters
Architecture and Deployment Models
20 min read
Workspaces and Resource Management
18 min read
Data Connectors and Ingestion Strategies
22 min read
Parsing Logs with Kusto Query Language (KQL) Basics
25 min read
Advanced KQL for Security Analytics
25 min read
Configuring Analytics Rules for Threat Detection
20 min read
Customizing Incidents and Alert Grouping
15 min read
Integrating Microsoft 365 Defender
18 min read
Identity Protection and Monitoring
18 min read
Implementing Watchlists and Threat Intelligence
20 min read
Threat Hunting Workflows and Notebooks
25 min read
Introduction to Automation and SOAR
20 min read
Building Logic Apps Playbooks
25 min read
Advanced Incident Response Orchestration
22 min read
Visualizing Data with Workbooks
18 min read
Security Content Lifecycle and CI/CD
20 min read
Cost Management and Workspace Optimization
15 min read
Troubleshooting and Health Monitoring
18 min read
Professional Certification and Career Pathing
15 min read