Discover how Recorded Future integrates with Microsoft Azure Sentinel to enhance threat identification, prioritization, and response using external threat intelligence. Explore the custom connector, data flow, and security intelligence features of this integration. Learn about playbooks, indicators, and rule templates that streamline the detection and enrichment workflow. Watch a demonstration of the connection process and gain insights into maximizing the value of existing security investments. Ideal for security professionals looking to improve their threat intelligence capabilities within the Microsoft Azure environment.
Intelligence Led Security Operations in Microsoft Azure Sentinel
Overview
Syllabus
Introduction
Custom Connector
Data Flow
Security Intelligence
Playbooks
Demo
Connection
Indicators
Rule Templates
Detection Workflow
Enrichment
Workflow
Taught by
Microsoft Ignite
Tags
Related Courses
-
Configure SIEM security operations using Microsoft Sentinel
-
SC-200: Create detections and perform investigations using Microsoft Sentinel
-
Cloud-native security operations with Microsoft Sentinel
-
SC-200: Connect logs to Microsoft Sentinel
-
SC-200: Configure your Microsoft Sentinel environment
-
Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure
