Dates
The training takes place during these timeslots:
- Oct 4: 09h00-17h00 CET
- Oct 5: 09h00-12h30 CET
Audience
The training is valuable for IT engineers, IT administrators, security engineers, security administrators and architects
Prerequisites
Basic knowledge of on-premises environments
Basic knowledge of the Azure Platform (IaaS – PaaS – SaaS)
Training content
This course is intended for who wants to learn more about Azure Sentinel and how to implement it in their organization. This is a level 400 training, so we’ll eventually dive deep into this topic. We will start with a basic overview of what Azure Sentinel is, to then dive deeper into the content with deploying Azure Sentinel in your environment, event and log management. We’ll also provide you with understanding the KQL language and how to use it for advanced hunting and writing playbooks. To finish, we’ll dive into the Automation part of Azure Sentinel.
- Technical overview
- Cloud architecture
- Events
- Logs
- Integrating
- KQL
- Rules
- Playbooks
- Use cases
- Hunting
- Automation
- Roadmap
General
Some general information about the training:
- The online training takes place via Microsoft Teams
- Access to an Azure subscription will be provided
- The Azure consumption cost is included in the training price
- All training material is handed over to the participants
- The prerequisite software will be communicated one week before the training
