From the course: Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

Describe threat detection and mitigation capabilities in Microsoft Sentinel

Describe threat detection and mitigation capabilities in Microsoft Sentinel

- Describe capabilities of Microsoft Sentinel. Describe the threat detection and mitigation capabilities in Microsoft Sentinel. Microsoft Sentinel is a cloud-native security information event management and security orchestration automated response solution that provides intelligence security analytics for enterprises. It can help you detect and mitigate threats by collecting data from various sources, such as Azure, Microsoft 365 and third-party providers, and storing it in a scalable data lake; applying advanced analytics and machine learning to detect previously undetected threats and minimize false positives, integrating threat intelligence from Microsoft and other sources to provide context and insights for investigations and response decisions, establishing security orchestration and automation within built-in playbooks and connectors to streamline and accelerate incident response while providing a single pane of glass for security operations centers, or SOCs, allowing analysts…

Contents