Cloud Defense Strategies with Azure Sentinel: Hands-on Threat Hunting in Cloud Logs and Services

This book provides hands-on experience with Azure Sentinel, covering threat hunting, integration with third-party security appliances, and improving cyber security threat hunting skills. It is designed for security consultants, solution architects, cloud security architects, and IT security engineers.

Format: Paperback / softback
Length: 285 pages
Publication date: 02 October 2021
Publisher: APress

This comprehensive book is designed to help you leverage Azure Sentinel to enhance your cloud security posture. It provides hands-on experience through threat hunting in Azure cloud logs and metrics from various Azure services, including Azure Platform, Azure Active Directory, Azure Monitor, Azure Security Center, and Azure Defender.

The book is divided into three parts:

Part I: This section provides a clear understanding of Azure Sentinel and its features, along with Azure Security Services such as Azure Monitor, Azure Security Center, and Azure Defender. It also covers integration with third-party security appliances, including AWS. You will delve into multi-Azure Tenant deployment best practices and the challenges associated with them.

Part II: In this part, you will learn how to improve your cyber security threat hunting skills while enhancing your ability to defend against attacks, stop data loss, prevent business disruption, and expose hidden malware. You will gain an overview of the MITRE Attack Matrix and its usage, followed by Azure Sentinel operations and strategies for continuous skill improvement.

Part III: This section provides an overview of Azure Sentinel's technical benefits and functionality. It covers configuring Azure Sentinel to support incident response, integrating with Azure Security standards, and being aware of the challenges and costs associated with the Azure log analytics workspace.

Who This Book Is For: This book is intended for security consultants, solution architects, cloud security architects, and IT security engineers who want to maximize the benefits of Azure Sentinel and improve their cloud security posture.

By following the guidance provided in this book, you will be able to effectively protect Azure resources from cyberattacks and support the XDR (Extend, Detect, Respond) industry threat strategy through Azure Sentinel.

Weight: 588g
Dimension: 253 x 179 x 24 (mm)
ISBN-13: 9781484271315
Edition number: 1st ed.