A Look at Microsoft's Cloud-Native SIEM - Darwin Salazar - ESW #259

<p>In late 2019, Microsoft released their cloud-native SIEM, Sentinel. A lot in the world has changed since then so we'll be looking at Sentinel's progression, talking about it's features and what may make it attractive to enterprises in 2022 and beyond. To register for Darwin’s upcoming workshop with Security Weekly, please visit: <a href= "https://attendee.gotowebinar.com/register/2393226017093033995?source=esw"> https://attendee.gotowebinar.com/register/2393226017093033995?source=esw</a></p> <p>Microsoft Sentinel Ninja Training - <a href= "https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/become-a-microsoft-sentinel-ninja-the-complete-level-400/ba-p/1246310"> https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/become-a-microsoft-sentinel-ninja-the-complete-level-400/ba-p/1246310#</a></p> <p>Forrester MSFT Sentinel reports indicating 201% ROI over 3 years - <a href= "https://www.microsoft.com/security/blog/2020/11/16/forrester-tei-study-azure-sentinel-delivers-201-percent-roi-over-3-years-and-a-payback-of-less-than-6-months/"> https://www.microsoft.com/security/blog/2020/11/16/forrester-tei-study-azure-sentinel-delivers-201-percent-roi-over-3-years-and-a-payback-of-less-than-6-months/</a></p> <p>If you want to get started with Kusto Query Language (KQL) without having to bootstrap your own environment, MSFT has a live log analytics workspace with tons of log data. You must have an Azure subscription to use. Link : <a href= "https://aka.ms/lademo">https://aka.ms/lademo </a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/esw">https://www.securityweekly.com/esw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/esw259">https://securityweekly.com/esw259</a></p>