Identity Threat Protection with Sentinel

Course details

Are you ready to take a deep dive into the ever-evolving world of identity and access management (IAM)? In this course, instructor Venicia Solomons shows you how to start using Microsoft Sentinel to monitor identity-based threats and protect your organization from potentially devastating attacks. Develop a more nuanced understanding of Sentinel's role in IAM security, including its importance and key challenges, setup and configuration, initialization, and integration with Microsoft Entra ID. Along the way, Venicia shares insights as well as more advanced strategies for leveraging Sentinel’s built-in features, optimizing its performance, and implementing automated responses for enhanced security management.

This course is ideal for mid-level cybersecurity professionals who already have a foundational understanding of cybersecurity principles and are looking to learn more about identity and access management (IAM) security.

Concepts

0. Introduction

01 - Identity protection with Sentinel
02 - What you should know
03 - Why IAM security matters
04 - The landscape of identity-based threats

1. Exploring Sentinel in IAM Security

05 - Introduction to Sentinel for threat detection
06 - How Sentinel helps to address IAM challenges
07 - Sentinel in action - Key use cases

2. Implementing Sentinel for Enhanced IAM Security

08 - Getting started with Sentinel - Initial setup
09 - Configuring Sentinel for IAM - Fundamental steps
10 - Tailoring Sentinel configuration for robust IAM security
11 - Enabling UEBA for identity threat detection in Sentinel
12 - Challenge - Configuring Sentinel for a hypothetical scenario
13 - Solution - Configuring Sentinel for a hypothetical scenario

3. Sentinel in Practice - Enhancing IAM Security

14 - Crafting effective threat detection rules in Sentinel
15 - Configuring analytic rules in Sentinel for Entra ID
16 - Monitoring and responding to IAM threats with Sentinel
17 - Challenge - Threat detection rule scenarios
18 - Solution - Threat detection rule scenarios

Conclusion

19 - Using Sentinel to prevent identiy threat