Threat detection with Microsoft Sentinel analytics

Intermediate
Security Operations Analyst
Azure
Microsoft Sentinel

In this module, you learned how Microsoft Sentinel Analytics can help the SecOps team identify and stop cyber attacks.

Learning objectives

In this module, you will:

  • Explain the importance of Microsoft Sentinel Analytics.
  • Explain different types of analytics rules.
  • Create rules from templates.
  • Create new analytics rules and queries using the analytics rule wizard.
  • Manage rules with modifications.

Prerequisites

  • Basic knowledge of Azure services
  • Basic knowledge of operational concepts, such as monitoring, logging, and alerting
  • Azure subscription
  • Microsoft Sentinel instance in your Azure subscription