滿額折
Microsoft Azure Sentinel
商品資訊
相關商品
商品簡介
商品簡介
Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft's advanced cloud-based SIEM Microsoft's cloud-based Azure Sentinel helps you fully leverage advanced AI to automate threat identification and response - without the complexity and scalability challenges of traditional Security Information and Event Management (SIEM) solutions. Now, three of Microsoft's leading experts review all it can do, and guide you step by step through planning, deployment, and daily operations. Leveraging in-the-trenches experience supporting early customers, they cover everything from configuration to data ingestion, rule development to incident management...
even proactive threat hunting to disrupt attacks before you're exploited. Three of Microsoft's leading security operations experts show how to: * Use Azure Sentinel to respond to today's fast-evolving cybersecurity environment, and leverage the benefits of its cloud-native architecture * Review threat intelligence essentials: attacker motivations, potential targets, and tactics, techniques, and procedures * Explore Azure Sentinel components, architecture, design considerations, and initial configuration * Ingest alert log data from services and endpoints you need to monitor * Build and validate rules to analyze ingested data and create cases for investigation * Prevent alert fatigue by projecting how many incidents each rule will generate * Help Security Operation Centers (SOCs) seamlessly manage each incident's lifecycle * Move towards proactive threat hunting: identify sophisticated threat behaviors and disrupt cyber kill chains before you're exploited * Do more with data: use programmable Jupyter notebooks and their libraries for machine learning, visualization, and data analysis * Use Playbooks to perform Security Orchestration, Automation and Response (SOAR) * Save resources by automating responses to low-level events * Create visualizations to spot trends, identify or clarify relationships, and speed decisions * Integrate with partners and other third-parties, including Fortinet, AWS, and Palo Alto
even proactive threat hunting to disrupt attacks before you're exploited. Three of Microsoft's leading security operations experts show how to: * Use Azure Sentinel to respond to today's fast-evolving cybersecurity environment, and leverage the benefits of its cloud-native architecture * Review threat intelligence essentials: attacker motivations, potential targets, and tactics, techniques, and procedures * Explore Azure Sentinel components, architecture, design considerations, and initial configuration * Ingest alert log data from services and endpoints you need to monitor * Build and validate rules to analyze ingested data and create cases for investigation * Prevent alert fatigue by projecting how many incidents each rule will generate * Help Security Operation Centers (SOCs) seamlessly manage each incident's lifecycle * Move towards proactive threat hunting: identify sophisticated threat behaviors and disrupt cyber kill chains before you're exploited * Do more with data: use programmable Jupyter notebooks and their libraries for machine learning, visualization, and data analysis * Use Playbooks to perform Security Orchestration, Automation and Response (SOAR) * Save resources by automating responses to low-level events * Create visualizations to spot trends, identify or clarify relationships, and speed decisions * Integrate with partners and other third-parties, including Fortinet, AWS, and Palo Alto
您曾經瀏覽過的商品
購物須知
外文書商品之書封，為出版社提供之樣本。實際出貨商品，以出版社所提供之現有版本為主。部份書籍，因出版社供應狀況特殊，匯率將依實際狀況做調整。
無庫存之商品，在您完成訂單程序之後，將以空運的方式為你下單調貨。為了縮短等待的時間，建議您將外文書與其他商品分開下單，以獲得最快的取貨速度，平均調貨時間為1~2個月。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。