Microsoft KQL and Sentinel  

Azure Sentinel is Microsoft’s Security Information and Event Management (SIEM) tool developed to integrate cloud security and artificial intelligence (AI). Azure Sentinel will help customers to identify security issues in their environment, and then use automation to help resolve these issues.

AGENDA:
May 17 | 1:00 PM – 4:00 PM CDT

Part 1 (65 min)
Kusto – Queries | Operators | Functions | Querying Logs

Break (10 mins)

Part 2 (65 mins)
Incident Management | Playbooks

Questions (10 mins)

May 17, 2022 | 1:00-4:00 PM CT | Register Here