080: Azure Sentinel with Sreedhar Ande

Hosted by Edward Walton, Frank Grimberg, Rod Trent, Brodie Cassell

Sreedhar Ande Github: https://github.com/andedevsecops

1. https://aka.ms/asnew --> up to date info on the improvements we make in the product

2. NRT Rules considerations  Detect threats quickly with near-real-time (NRT) analytics rules in Microsoft Sentinel | Microsoft Docs https://docs.microsoft.com/en-us/azure/sentinel/near-real-time-rules#considerations

3. Analytical Rules Health a. Playbook : Azure-Sentinel/Playbooks/Send-AnalyticalRulesHealthNotifications at master · Azure/Azure-Sentinel (github.com) https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Send-AnalyticalRulesHealthNotifications b. Blog: Monitoring Microsoft Sentinel Analytical Rules – Push Health Notifications - Microsoft Tech Community https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/monitoring-microsoft-sentinel-analytical-rules-push-health/ba-p/2793694

4. Guide to build Microsoft Sentinel Solutions a. Webinar: Create Your Own Microsoft Sentinel Solutions https://youtu.be/oYTgaTh_NOU b. Azure-Sentinel/Solutions at master · Azure/Azure-Sentinel (github.com) https://github.com/Azure/Azure-Sentinel/tree/master/Solutions#guide-to-building-microsoft-sentinel-solutions

5. Microsoft Sentinel Repositories demo a. Managing security content as code - Microsoft Sentinel in the Field #1 - YouTube https://www.youtube.com/watch?v=vqLqJhaFNBk

Show Links:

Twitch: https://www.twitch.tv/microsoftsecurityinsights

Discord: https://discord.gg/thCAR7RMUe