Overview of Azure Security Center and Azure Sentinel core features.

NOTE - ASC is now called Azure Defender for Cloud

00:00 Introduction
01:05 ASC Overview
05:25 Secure score and recommendations
08:22 Exemptions
10:05 Workflow automations
11:20 Security policy and Azure policy
16:20 Continuous export
17:30 Azure Defender
23:50 Advanced protections
31:22 Azure Sentinel overview
34:04 Data connectors
36:35 Analytics (rules)
39:40 Playbooks (automations)
42:07 Workbooks
43:55 Hunting
44:48 Notebooks
46:25 Summary and close

Git repo for Sentinel playbooks - [ Ссылка ]

свернуть