Global Automation Bootcamp 2021 Fri 5th February
The ins and outs of Sentinel Automation
When using the cloud SIEM, Azure Sentinel, a big part of the configuration is setting up automation. Automation will help you keep the alert spam down and enable SOC analysts to focus on what’s important. During this demo filled sessions, we will go over Playbooks, Functions, Service Principals, DevOps and much more! Next to some tips and tricks, we will also touch on some best practices. This is a must for every Sentinel administrator.
Technical Level: 300
Presented By: Thijs Lecomte