J’étais passé à côté de l’info mais l’équipe Sentinel a publié deux formations complètes (Ninja) sur Microsoft Sentine allant jusqu’à un niveau d’expertise autour des thématiques de l’automatisation (SOAR) et les notebooks.
Accéder à Become a Microsoft Sentinel Automation Ninja! - Microsoft Community Hub où on retrouve notamment :
- Where to start?
- How to build automation rule
- How to build the playbook
- What’s new with Microsoft Sentinel Automation
- Tips & Tricks
- Migrate from 3rd party automation tools
Accéder à Azure Sentinel notebook ninja - the series! (microsoft.com) où on retrouve notamment :
- Part 1:What are notebooks and when do you need them?
- Part 2:How to get started with notebooks and tour of the features
- Part 3:Overview of the pre-built notebooks and how to use them
- Part 3.5:Using Code Snippets to build your own Sentinel Notebooks
- Part 4:How to create your own notebooks from scratch and how to customize the existing ones
