wwlpublish Threat response with Microsoft Sentinel playbooks - Training
- This module covers creating Microsoft
Sentinel playbookstoautomateincident response, including understandingSOARcapabilities, usingLogic Apps connectors, and executingplaybookson demand.
‣
Introduction
‣
Exercise - Set up the Azure environment
‣
Understand incidents
‣
Incident evidence and entities
‣
Incident management
‣
Exercise - Investigate an incident
‣