Azure Sentinel - A first look at Microsoft's SIEM Solution

DerbyCon 9.0 - Finish Line

Presented by: Carl Hertz
Date: Friday September 06, 2019
Time: 14:00 - 14:45
Location: Track 3

A fun walk-through of what's great and what's not-so great about the brand new Azure Sentinel SIEM.This will be based on my real-world experience deploying this solution into my organization's hybrid-cloud infrastructure. I'll show you what it was like to set up data collection, security alerts, and automation. What did Microsoft get right and what did they get wrong?Let's talk about it.

Carl Hertz

Carl Hertz is Director of Information Technology at Elevate Energy, a non-profit dedicated to bringing the benefits of the Green Economy to everyone. He has been an IT professional for 30 years, a security professional for 15, a hiring manager for 20 years, a project manager for 10 years, and a goofball for all of his life. You can follow his posts about tech, security, music, cycling, astronomy, feminism, parenthood, depression, and all the lulz at @cillic on Twitter.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats