You're reading from Microsoft Azure Security Technologies Certification and Beyond Gain practical skills to secure your Azure environment and pass the AZ-500 exam

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781800562653

Length 526 pages

Edition 1st Edition

Tools

Azure

Concepts

Cybersecurity

Author (1):

David Okeyode

View More author details

Table of Contents (19) Chapters

Preface

1. Section 1: Implement Identity and Access Security for Azure

2. Chapter 1: Introduction to Azure Security FREE CHAPTER

3. Chapter 2: Understanding Azure AD

4. Chapter 3: Azure AD Hybrid Identity

5. Chapter 4: Azure AD Identity Security

6. Chapter 5: Azure AD Identity Governance

7. Section 2: Implement Azure Platform Protection

8. Chapter 6: Implementing Perimeter Security

9. Chapter 7: Implementing Network Security

10. Chapter 8: Implementing Host Security

11. Chapter 9: Implementing Container Security

12. Section 3: Secure Storage, Applications, and Data

13. Chapter 10: Implementing Storage Security

14. Chapter 11: Implementing Database Security

15. Chapter 12: Implementing Secrets, Keys, and Certificate Management with Key Vault

16. Chapter 13: Azure Cloud Governance and Security Operations

17. Assessments

18. Other Books You May Enjoy

Managing security operations with Azure Sentinel

Azure Sentinel is a scalable, SIEM, and SOAR solution that's hosted on the Azure platform. What do we mean by this? Let's review what SIEM and SOAR are.

SIEM stands for Security Information Event Management. It works by collecting log and event data generated from multiple sources, collating the data on a centralized platform, and performing automated analysis of that data to detect threats. This is not a full description of what a SIEM is but a short review. Many SIEMs, including Azure Sentinel, have capabilities beyond these.

SOAR stands for Security Orchestration, Automation, and Response. SOAR allows companies to collect threat-related data from a range of sources and automate responses to those threats:

Figure 13.23 – SIEM and SOAR

Looking at the descriptions, it makes sense for these solutions to work together. SIEM collects logs and events from data sources and detects threats...