Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Microsoft Unified XDR and SIEM Solution Handbook
  • Table Of Contents Toc
  • Feedback & Rating feedback
Microsoft Unified XDR and SIEM Solution Handbook

Microsoft Unified XDR and SIEM Solution Handbook

By : Raghu Boddu, Lamppu
4.4 (9)
close
close
Microsoft Unified XDR and SIEM Solution Handbook

Microsoft Unified XDR and SIEM Solution Handbook

4.4 (9)
By: Raghu Boddu, Lamppu

Overview of this book

Tired of dealing with fragmented security tools and navigating endless threat escalations? Take charge of your cyber defenses with the power of Microsoft's unified XDR and SIEM solution. This comprehensive guide offers an actionable roadmap to implementing, managing, and leveraging the full potential of the powerful unified XDR + SIEM solution, starting with an overview of Zero Trust principles and the necessity of XDR + SIEM solutions in modern cybersecurity. From understanding concepts like EDR, MDR, and NDR and the benefits of the unified XDR + SIEM solution for SOC modernization to threat scenarios and response, you’ll gain real-world insights and strategies for addressing security vulnerabilities. Additionally, the book will show you how to enhance Secure Score, outline implementation strategies and best practices, and emphasize the value of managed XDR and SIEM solutions. That’s not all; you’ll also find resources for staying updated in the dynamic cybersecurity landscape. By the end of this insightful guide, you'll have a comprehensive understanding of XDR, SIEM, and Microsoft's unified solution to elevate your overall security posture and protect your organization more effectively.
Table of Contents (17 chapters)
close
close
Free Chapter
1
Case Study – High Tech Rapid Solutions Corporation
2
Part 1 – Zero Trust, XDR, and SIEM Basics and Unlocking Microsoft’s XDR and SIEM Solution
6
Part 2 – Microsoft’s Unified Approach to Threat Detection and Response
11
Part 3 – Mastering Microsoft’s Unified XDR and SIEM Solution – Strategies, Roadmap, and the Basics of Managed Solutions

SOC journey with Microsoft’s unified security operations platform

In this section, we focus on the investigation experience by highlighting a few key features in a scenario where an organization is utilizing both Microsoft Sentinel and Microsoft Defender XDR in its SOC operations.

Typically, when an incident is created in the Sentinel incident queue, the SOC team receives a notification about the incident. Notifications can be sent to third-party solutions such as ServiceNow or Jira depending on what ticketing system the SOC team uses.

If a third-party SOAR solution is in use (for example, Cortex XSOAR, formerly Demisto), this can be the place where the investigation process starts. In some cases, typically in smaller organizations, there may not necessarily be a ticketing system in use for handling case management in SOC; rather, a Teams channel or email notifications may be the preferred way to get notified about new incidents.

Investigation in Microsoft Sentinel

...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY