Section 3: Security Threat Hunting
by Richard Diver,
Gary Bushey,
Jason S. Rader
Learn Azure Sentinel
- Learn Azure Sentinel
- Why subscribe?
- Foreword
- Contributors
- About the authors
- About the reviewers
- Packt is searching for authors like you
- Preface
- Section 1: Design and Implementation
- Chapter 1: Getting Started with Azure Sentinel
- The current cloud security landscape
- Cloud security reference framework
- SOC platform components
- Mapping the SOC architecture
- Security solution integrations
- Cloud platform integrations
- Private infrastructure integrations
- Service pricing for Azure Sentinel
- Scenario mapping
- Summary
- Questions
- Further reading
- Chapter 2: Azure Monitor – Log Analytics
- Section 2: Data Connectors, Management, and Queries
- Chapter 3: Managing and Collecting Data
- Chapter 4: Integrating Threat Intelligence
- Chapter 5: Using the Kusto Query Language (KQL)
- Chapter 6: Azure Sentinel Logs and Writing Queries
- Section 3: Security Threat Hunting
- Chapter 7: Creating Analytic Rules
- Chapter 8: Introducing Workbooks
- Chapter 9: Incident Management
- Chapter 10: Threat Hunting in Azure Sentinel
- Section 4: Integration and Automation
- Chapter 11: Creating Playbooks and Logic Apps
- Chapter 12: ServiceNow Integration
- Section 5: Operational Guidance
- Chapter 13:Operational Tasks for Azure Sentinel
- Chapter 14: Constant Learning and Community Contribution
- Assessments
- Other Books You May Enjoy
In this section, you will learn how to use various tools to create analytic rules, hunt for threats, and respond to security incidents.
The following chapters are included in this section:
- Chapter 7, Creating Analytic Rules
- Chapter 8, Introducing Workbooks
- Chapter 9, Incident Management
- Chapter 10, Threat Hunting in Azure Sentinel
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.