Explore the latest books of this year!
Bookbot

Jeff Gilbert

    Exam Ref SC-100 Microsoft Cybersecurity Architect
    Exam Ref SC-200 Microsoft Security Operations Analyst
    Exam Ref AZ-500 Microsoft Azure Security Technologies
    Microsoft Azure Sentinel
    Exam Ref SC-900 Microsoft Security, Compliance, and Identity Fundamentals
    • "Prepare for Microsoft Exam SC-900 and help demonstrate your real-world knowledge of the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. Designed for business stakeholders, new and existing IT professionals, functional consultants, and students, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Security, Compliance, and Identity Fundamentals level."--Amazon.com

      Exam Ref SC-900 Microsoft Security, Compliance, and Identity Fundamentals
    • Microsoft's cloud-based Azure Sentinel enables organizations to harness advanced AI for automated threat identification and response, addressing the complexities of traditional SIEM solutions. This guide, authored by three of Microsoft's top experts, provides a comprehensive roadmap for planning, deploying, and operating Azure Sentinel. Drawing from their hands-on experience with early adopters, they cover essential topics including configuration, data ingestion, rule development, incident management, and proactive threat hunting. Key insights include how to effectively utilize Azure Sentinel in today's dynamic cybersecurity landscape, understanding threat intelligence fundamentals such as attacker motivations and tactics, and exploring the platform's components and architecture. Readers will learn to ingest alert log data from critical services, build and validate analytical rules, and manage incident lifecycles within Security Operation Centers (SOCs). The experts emphasize the importance of proactive threat hunting to disrupt cyber kill chains and offer techniques to mitigate alert fatigue. Additionally, they demonstrate how to leverage programmable Jupyter notebooks for machine learning and data analysis, utilize Playbooks for Security Orchestration, Automation, and Response (SOAR), and automate responses to low-level events. Visualizations for trend spotting and integration with partners like Fortinet, AWS, and Palo Al

      Microsoft Azure Sentinel
    • "Prepare for Microsoft Exam SC-200--and help demonstrate your real-world mastery of skills and knowledge required to work with stakeholders to secure IT systems, and to rapidly remediate active attacks. Designed for Windows administrators, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Associate level." --Amazon.com

      Exam Ref SC-200 Microsoft Security Operations Analyst