Modern IT environments generate security-relevant events at high volume and speed. Anyone who wants to keep an overview needs a central system for analysis and prioritisation.

Key topics

• The role of SIEM as a core component of modern security architectures.
• Initial setup and basic configuration of Microsoft Sentinel.
• Integrating data sources and connectors into Sentinel.
• Evaluating, correlating and prioritising security-relevant events.
• Using automation rules to respond to incidents.
• Adjusting and optimising detection rules during live operations.

Prerequisite
Knowledge of IT security, cloud services and operational IT processes is helpful for following the training.

Target group
IT professionals working in security monitoring or looking to take on SOC responsibilities.

After the training, you will be able to configure Microsoft Sentinel as a central security tool and manage Security Operations professionally.