You're reading from Microsoft 365 Security Administration: MS-500 Exam Guide Plan and implement security and compliance strategies for Microsoft 365 and hybrid environments

Product type Paperback

Published in Jun 2020

Publisher Packt

ISBN-13 9781838983123

Length 672 pages

Edition 1st Edition

Languages

SQL

Tools

Azure

Concepts

IT Certification

Author (1):

Peter Rising

View More author details

Table of Contents (29) Chapters

Preface

1. Section 1: Configuring and Administering Identity and Access in Microsoft 365

2. Chapter 1: Planning for Hybrid Identity FREE CHAPTER

3. Chapter 2: Authentication and Security

4. Chapter 3: Implementing Conditional Access Policies

5. Chapter 4: Role Assignment and Privileged Identities in Microsoft 365

6. Chapter 5: Azure AD Identity Protection

7. Section 2: Implementing and Managing Threat Protection

8. Chapter 6: Configuring an Advanced Threat Protection Solution

9. Chapter 7: Configuring Microsoft Defender ATP to Protect Devices

10. Chapter 8: Message Protection in Office 365

11. Chapter 9: Threat Intelligence and Tracking

12. Chapter 10: Using Azure Sentinel to Monitor Microsoft 365 Security

13. Section 3: Information Protection in Microsoft 365

14. Chapter 11: Controlling Secure Access to Information Stored in Office 365

15. Chapter 12: Azure Information Protection

16. Chapter 13: Data Loss Prevention

17. Chapter 14: Cloud App Discovery and Security

18. Section 4: Data Governance and Compliance in Microsoft 365

19. Chapter 15: Security Analytics and Auditing Capabilities

20. Chapter 16: Personal Data Protection in Microsoft 365

21. Chapter 17: Data Governance and Retention

22. Chapter 18: Search and Investigation

23. Chapter 19: Data Privacy Compliance

24. Section 5: Mock Exam and Assessment

25. Chapter 20: Mock Exam

Case Study

26. Chapter 21: Mock Exam Answers

Answers and explanations

27. Chapter 22: Assessments

28. Other Books You May Enjoy

Leave a review - let other readers know what you think

Chapter 10: Using Azure Sentinel to Monitor Microsoft 365 Security

Azure Sentinel is a cloud-based security information and event management (SIEM) tool that enables the analysis of vast quantities of data both within Microsoft 365 and from external sources using artificial intelligence technology. Azure Sentinel allows you to gather data, detect potential threats, and then investigate and respond to those threats. In this chapter, we will show you how to plan and configure your Azure Sentinel instance, explain the process of using Azure Sentinel playbooks, and finally how to monitor and manage Azure Sentinel on an ongoing basis.

After reading this chapter, you will be able to access and enable Azure Sentinel in the Azure portal, set up a Log Analytics workspace, and connect to Microsoft and third-party data sources. You will learn how to use playbooks to automate responses to security issues and understand how to manage and monitor Azure Sentinel on an ongoing basis.

In this...