Скачать с ютуб Azure Sentinel Lab Series | Setup Alert Rules and add a simple Logic App | EP2 в хорошем качестве

Azure Sentinel Lab Series | Setup Alert Rules and add a simple Logic App | EP2

We will now take our knowledge and create a custom CEF log. Then trigger an alert with the CEF log and also trigger a simple automation workflow. 00:00:00 - Intro 00:01:20 - Be mindful when turning on performance monitoring 00:02:55 - Enabling the right facility and severity 00:03:10 - Understanding CEF and Syslog 00:06:36 - Generate a custom CEF log 00:10:00 - Double logging Syslog and CEF 00:12:50 - Understanding Rsyslog rule priority 00:17:38 - Lets make an analytic Rule (alert) 00:22:45 - Lets build a automated playbook (Logic App) 00:27:15 - Setup a Switch Control to route based on value of email response 00:29:47 - Lets trigger the playbook Azure Sentinel Lab Series Playlist    • Azure Sentinel Lab Series   Become an Azure Sentinel Ninja: The complete level 400 training https://techcommunity.microsoft.com/t... It is not required, but please watch the KQL tutorial series prior to doing this lab.    • KQL Tutorial Series   Connect with me! Twitter -   / teachjing   LinkedIn -   / teachjing