Microsoft Mechanics Podcast14 Loka 2024

New Low-Cost Log Options, Automation, AI & SIEM Migration | Microsoft Sentinel Updates

Streamline threat detection and response across diverse environments with Microsoft Sentinel, your cloud-native SIEM solution. With features like Auxiliary logs for low-cost storage and proactive data optimization recommendations, you can efficiently manage high volumes of security data without compromising on threat intelligence. Leverage built-in AI and automation to uncover hidden threats and reduce investigation time from days to minutes.

Rob Lefferts, CVP for Security Solutions at Microsoft, joins Jeremy Chapman to show how to migrate from existing SIEM solutions with built-in migration tools, ensuring seamless access to your security logs while maintaining investigative integrity.

► QUICK LINKS:
00:00 - Microsoft Sentinel, modern Cloud SIEM
01:12 - Unified security operations platform
02:55 - Prioritize security updates
04:27 - Storage options
05:11 - Optimize data coverage and usage
06:17 - Protect against long-term persistent attacks
07:58 - Automation using auxiliary logs
08:59 - Manual effort
10:10 - Automation
12:07 - Migration
13:31 - Wrap up

► Link References

Get started at https://aka.ms/MicrosoftSentinel

Find samples for the Playbook Logic App and the Function app at https://aka.ms/AuxLogsTIapp

► Unfamiliar with Microsoft Mechanics?

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(100)

Agent 365 | Identity & Access Controls in Entra

Take control of every AI agent, managed or not, running in your environment using Agent 365 and Microsoft Entra. Surface agents across AWS Bedrock, Google Vertex, Databricks, and Salesforce in one reg...

9 Kesä 8min

Introducing Azure HorizonDB - PostgreSQL

Run enterprise Postgres workloads on Azure HorizonDB with around 3x the throughput of self-managed deployments — zone-resilient by default, no architectural trade-offs. Call AI models directly from SQ...

3 Kesä 13min

Agent 365 | Security Operations in Defender

Surface every AI agent in your tenant and expose the ones throwing security signals — across both the IT and SOC view. Triage high-severity alerts as IT in the Microsoft 365 admin center, then pivot i...

29 Touko 7min

Microsoft Entra Tenant Governance | Find Configuration Drift

Ensure your tenant configuration doesn't drift from defined security and compliance requirements with Microsoft Entra Tenant Governance. Capture configuration as code across 200+ resource types in Ent...

27 Touko 8min

Automate evaluations | Microsoft Foundry

Build AI agents that meet your standards for quality, safety, and performance using Microsoft Foundry. Trace every run end-to-end, generate synthetic datasets to stress-test on demand, fire automated ...

21 Touko 9min

Microsoft Excel Beginners Tutorial (2026)

This is the Microsoft Excel guide and tutorial for beginners. If you're new to and getting started with Excel or coming from another app, in this video we teach the basics of Excel, the user interface...

18 Touko 12min

Work IQ | Data, Context, Skills & Tools for Copilot and Your Agents

Ground every Microsoft 365 Copilot response in your real work data. Pull context from SharePoint, OneDrive, Teams, email, and meetings — all through Work IQ. Draft Word documents that carry your exist...

13 Touko 9min

Azure Arc | On-prem + Multi-cloud Management

Managing Servers, and Kubernetes across on-prem, and multiple clouds, can quickly become complex, especially when you're juggling multiple tools. In this video, we explore how Azure Arc simplifies hyb...

8 Touko 14min