From the course: Microsoft Security Operations Analyst Associate (SC-200) Exam Tips

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Hunt for threats using Microsoft Sentinel

Hunt for threats using Microsoft Sentinel

- [Narrator] Security operations requires proactive analysis to look for suspected threats and vulnerabilities within your environment. Microsoft Sentinel provides hunting tools that allow you to query and search for these threats and vulnerabilities across connected data sources. The analytics rules within Microsoft Sentinel provide built-in queries based on attack types and Jupyter Notebooks can be used for further hunting for threats. The hunting dashboard has queries that are ready to use against familiar types of attacks. These can be used for immediately analyzing your environment against the common threats and attacks and hunting queries allow you to identify information before, during, or after a compromise to take proper action. These actions include being proactive in identifying potential compromised sources before an incident occurs, using the livestream to constantly run a query that can actively monitor events…

Contents