Sentinel for Beginners
by Microsoft
A two-day course on Microsoft Sentinel, from environment setup and data source ingestion to incident analysis with KQL. Attendees learn the basics of building analytics rules, running hunting activities and setting up response automation, with attention to governance and cost management. It is delivered remotely and aimed at those with a basic knowledge of Microsoft security technologies. The program is curated by Microsoft and delivered through EDU.Labs, a competence center of Computer Gross.
Target audience
What you will learn
- SIEM and SOAR architecture and Sentinel setup
- Data ingestion and on-prem and cloud data connectors
- Log analysis with Kusto Query Language (KQL)
- Analytics rules, hunting and response automation
How we support you
- Free guidance to identify the ideal training path
- Full management: from enrollment to logistics, we take care of everything
- Post-course support to integrate new skills into daily work
- Custom paths for business teams, on-site or remote