Section 4: Integration and Automation
by Richard Diver,
Gary Bushey,
Jason S. Rader
Learn Azure Sentinel
- Learn Azure Sentinel
- Why subscribe?
- Foreword
- Contributors
- About the authors
- About the reviewers
- Packt is searching for authors like you
- Preface
- Section 1: Design and Implementation
- Chapter 1: Getting Started with Azure Sentinel
- The current cloud security landscape
- Cloud security reference framework
- SOC platform components
- Mapping the SOC architecture
- Security solution integrations
- Cloud platform integrations
- Private infrastructure integrations
- Service pricing for Azure Sentinel
- Scenario mapping
- Summary
- Questions
- Further reading
- Chapter 2: Azure Monitor – Log Analytics
- Section 2: Data Connectors, Management, and Queries
- Chapter 3: Managing and Collecting Data
- Chapter 4: Integrating Threat Intelligence
- Chapter 5: Using the Kusto Query Language (KQL)
- Chapter 6: Azure Sentinel Logs and Writing Queries
- Section 3: Security Threat Hunting
- Chapter 7: Creating Analytic Rules
- Chapter 8: Introducing Workbooks
- Chapter 9: Incident Management
- Chapter 10: Threat Hunting in Azure Sentinel
- Section 4: Integration and Automation
- Chapter 11: Creating Playbooks and Logic Apps
- Chapter 12: ServiceNow Integration
- Section 5: Operational Guidance
- Chapter 13:Operational Tasks for Azure Sentinel
- Chapter 14: Constant Learning and Community Contribution
- Assessments
- Other Books You May Enjoy
In this section, you will learn how to create solutions that automate the responses required to handle security incidents and integrate them with a ticketing system.
The following chapters are included in this section:
- Chapter 11, Creating Playbooks and Logic Apps
- Chapter 12, ServiceNow Integration
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.