Hands On Microsoft Sentinel Soar Capabilities With Logic App

Understanding Logic App Application in Microsoft Sentinel

What you'll learn
Understand Microsoft Sentinel SOAR
Understand What is Logic App
Hands on Logic App Use Cases for Sentinel
Understand Complex Logic Apps in a Easy way
Be ready and armored with Logic Apps when it comes to Microsoft Sentinel
Requirements
Awareness of Microsoft Sentinel, Logic Apps, SOAR,SIEM
Description
Microsoft Sentinel is a Cloud Based SIEM & SOAR Solution which is a Revolutionary Product.SIEM: Security Information & Event Management.SOAR: Security Orchestration & Automated Response.In this Course we will Focus on Understand SOAR, In Sentinel to achieve SOAR we use Logic Apps,Though the Purview of Logic App is huge we will try to understand How to achieve Sentinel Automation & SOAR aspect.We have hands on Session in Building Logic App from Scratch and to utilize the one available out of the Box Respectively. This Course will Enable you to create Logic Apps and server the Automation Application in Sentinel which Microsoft Cloud SIEM Solution.The SOAR Capability of Microsoft Sentinel has Diverse aspect, and this very Course will enable you start in it with Real world use cases in hand, which indeed can be used directly as an application in your Sentinel Implementation.The Exercises and Demo Indicated in the Sessions are Reusable and can be implemented in your Azure Environment readily and easily.You just need a Demo Environment, Sentinel and Log analytics Workspace, which are pre-requisites for this Course We will build Logic apps from Scratch, Use Out of box Logic Apps to understand the Each Step and Action respectively.

Overview

Section 1: Course Introduction

Lecture 1 Course Introduction

Section 2: Logic App Introduction

Lecture 2 Introduction

Section 3: Logic App 1: Security Event via Legacy Agent

Lecture 3 Security Events via Legacy Agent Part 1

Lecture 4 Security Events via Legacy Agent Part 2

Lecture 5 Security Events via Legacy Agent Part 3

Section 4: Add IP to Named Location

Lecture 6 Add IP To Named Location to Block Part 1

Lecture 7 Add IP To Named Location to Block Part 2

Lecture 8 Add IP To Named Location to Block Part 3

Lecture 9 Add IP To Named Location to Block Part 4

Section 5: Notification via Logic Apps on Teams & Email

Lecture 10 Notification via Logic Apps on Teams & Email

Section 6: Virus Total Integration

Lecture 11 Virus Total Integration Part 1

Lecture 12 Virus Total Integration Part 2

Section 7: Adding Malicious IP to Firewall IP Group via Microsoft Teams

Lecture 13 Understand Logic App Flow Design Part 1

Lecture 14 Understand Logic App Flow Design Part 2

Lecture 15 Understand Logic App Flow Design Part 3

Lecture 16 Understand Logic App Flow Design Part 4

Section 8: Must Know In Logic App from Sentinel Perspective

Lecture 17 Must Know In Logic App from Sentinel Perspective

Security Consultants, CyberSecurity Consultants, SIEM & SOAR