Unknown: explode(): Passing null to parameter #2 ($string) of type string is deprecated in /home/skilramit/htdocs/www.skilr.com/public/catalog/controller/product/product.php on line 502Microsoft Sentinel Online Course | Skilr Learning
Step into the world of Microsoft Sentinel, Azure’s cloud-native SIEM solution designed to enhance security operations. This course begins with the fundamentals, guiding you through setup, resource management, and navigation of the Sentinel interface. You’ll explore key components such as incidents, workbooks, and automation while building a strong foundation. As you advance, the course dives into critical areas like threat hunting, analytics rules, and incident management, with hands-on demonstrations that showcase how to leverage data connectors, automation rules, and machine learning-driven analytics. You’ll also gain practical insights into integrating Sentinel with tools like ChatGPT to strengthen cybersecurity workflows. By the end, you’ll have comprehensive knowledge of Sentinel’s capabilities—from initial setup to advanced automation—empowering you to monitor, analyze, and secure your Azure environment with confidence.
Who should take this Course?
This course is ideal for IT professionals, security analysts, system administrators, and Azure enthusiasts who want to strengthen their cybersecurity skills. It’s also well-suited for SOC teams, DevOps engineers, and cloud administrators who need to monitor, detect, and respond to threats effectively using Microsoft Sentinel.
What you will learn
Configure and manage Microsoft Sentinel within Azure.
Create and customize analytics rules for threat detection.
Perform advanced threat hunting and incident management.
Automate responses using Sentinel's automation features.
Integrate AI tools like ChatGPT with Microsoft Sentinel.
Utilize workbooks and dashboards for effective monitoring.
Course Outline
Introduction
Welcome to the Course
Course Content
About the Instructor
What is Microsoft Sentinel?
Create and Manage Microsoft Sentinel
Free Azure account
Demo: Create Resource Group
Demo: Create Log Analytics Workspace
Demo: Create Microsoft Sentinel
General Overview
Overview of Incidents
Overview of Workbooks and Hunting
Overview of Notebooks, Entities, Threat Intelligence, and MITRE
Overview of Content Management and Repositories
Overview of Connectors, Analytics Rules, and Watchlists
Overview of Automation
Pricing for Microsoft Sentinel
Pricing Calculator
User and Entity Behavior Analytics
Playbook Settings and Health Monitoring
Microsoft Sentinel Roles and Permissions
Demo: Assign Microsoft Sentinel Role
Data Connectors
Options for Data Connectors
Demo: Enable Data Connector
Content Hub
Demo: Content Hub
Demo: Content Hub - Install Solutions
Threat Intelligence
Demo: Register to Threat Intelligence Feed
Demo: Enable Threat Intelligence
Demo: Data Retention Settings
Summary of Data Connectors Module
Analytics Rule
Introduction to Analytics Rules
Analytics Rules Dashboard
Properties of Analytics Rules
Demo: Create Analytics Rule
MultiStage Attack Detection
Analytics Rule Conclusion
Incident Management
Incident Management Introduction
Demo: Trigger Analytics Rule Detection
Incident Dashboard
Incident Information Overview
Demo: Incident Investigation Page
Demo: Incident Investigation Map
Demo: Entity Investigation
Demo: Incident Conclusion
Threat Hunting
Threat Hunting Introduction
Demo: SolarWind Investigation
Demo: Hunting for Infected Hosts
Hunting Dashboard
Demo: Hunting for Unknown Threats
Watchlists
Watchlists Introduction
Demo: Create Watchlist
Demo: Update Watchlist
Demo: Whitelist IP Addresses in the Analytics Rule
Workbooks
Workbooks Introduction
Demo: Create Workbook
Automation
Automation Introduction
Automation Dashboard
Options for Automation in Sentinel
Demo: Create Automation Rule
Demo: Create Automation Rule from Incident Dashboard
Demo: Playbook Designer
Automation History
Demo: VirusTotal Playbook
Microsoft Sentinel with ChatGPT
Demo: Create Playbook for ChatGPT from Scratch in Azure Cloud
Demo: Assign Appropriate Permissions to ChatGPT
Demo: How to Run ChatGPT on Cybersecurity Incidents
Demo: Make Adjustments to ChatGPT
Demo: How to Create Automation in SIEM with ChatGPT
Demo: Create Cybersecurity Incident in SIEM
Demo: Complex Integration of Artificial Intelligence with SIEM
Alternative Option for ChatGPT Integration with SIEM