You're reading from Security Orchestration, Automation, and Response for Security Analysts Learn the secrets of SOAR to improve MTTA and MTTR and strengthen your organization's security posture

Product type Paperback

Published in Jul 2023

Publisher Packt

ISBN-13 9781803242910

Length 338 pages

Edition 1st Edition

Tools

Microsoft Sentinel

Concepts

Cybersecurity

Author (1):

Benjamin Kovacevic

View More author details

Table of Contents (14) Chapters

Preface

1. Part 1: Intro to SOAR and Its Elements

2. Chapter 1: The Current State of Cybersecurity and the Role of SOAR FREE CHAPTER

3. Chapter 2: A Deep Dive into Incident Management and Investigation

4. Chapter 3: A Deep Dive into Automation and Reporting

5. Part 2: SOAR Tools and Automation Hands-On Examples

6. Chapter 4: Quick Dig into SOAR Tools

7. Chapter 5: Introducing Microsoft Sentinel Automation

8. Chapter 6: Enriching Incidents Using Automation

9. Chapter 7: Managing Incidents with Automation

10. Chapter 8: Responding to Incidents Using Automation

11. Chapter 9: Mastering Microsoft Sentinel Automation: Tips and Tricks

12. Index

Why subscribe?

13. Other Books You May Enjoy

Mastering Microsoft Sentinel Automation: Tips and Tricks

In the previous three chapters, we focused on hands-on examples that hopefully helped you understand how to utilize automation.

We started with examples of how to enrich incidents on the incident creation for faster triage in Chapter 6 and continued with examples of how to utilize automation to manage incidents in Chapter 7. In the previous chapter, we focused on how to utilize automation to respond to incidents. We utilized the two most common response automation techniques – block the user and isolate a device.

This chapter will focus on tips and tricks for mastering automation when working with Microsoft Sentinel playbooks.

In this final chapter of the book, we will go through the following topics: