Microsoft Sentinel

Build next-generation security operations with Microsoft Sentinel. Microsoft Sentinel is a scalable, cloud-native, security information and event management solution for automating and streamlining threat identification and response across your enterprise. Three leading experts guide you step-by-step through planning, deployment, and operations, helping you use Microsoft Sentinel to escape the complexity and scalability challenges of traditional solutions. Fully updated for the latest enhancements, this edition introduces new use cases for investigation, hunting, automation, and orchestration across your organization. The authors clearly introduce each service, concisely explain all new concepts, and present proven best practices for maximizing Microsoft Sentinel's.