Status: Accepted

When using the cloud SIEM, Azure Sentinel, a big part of the configuration is setting up automation. Automation will help you keep the alert spam down and enable SOC analysts to focus on what’s important. During this demo filled sessions, we will go over Playbooks, Functions, Service Principals, DevOps and much more! Next to some tips and tricks, we will also touch on some best practices. This is a must for every Sentinel administrator.

Technical Level: 300

Presented By: Thijs Lecomte