Monitor and report on security events in Azure Active Directory

Module
10 Units

Intermediate

Solution Architect

Azure

Azure Active Directory

Monitor

Monitor Azure Active Directory security events with built-in reporting and monitoring capabilities to prevent unauthorized access and potential data loss.

Learning objectives

In this module, you will:

Store Azure audit logs and sign-in activity logs in a Log Analytics workspace.
Create alerts for security events in a Log Analytics workspace.
Create and view dashboards to support improved monitoring.

Prerequisites

Familiarity with Azure Active Directory.
Familiarity with Log Analytics workspaces.

Introduction min
Use logs to detect suspicious activity min
Exercise - Set up and view sign-in logs and audit logs min
Integrate logs with a Log Analytics workspace min
Exercise - Integrate logs with a Log Analytics workspace min
Set and view alerts in your Log Analytics workspace min
Exercise - Set an alert in your Log Analytics workspace and view alerts min
Set up dashboards and reports to visualize log data min
Exercise - Set up a dashboard and add a report min
Summary min