NOW FULLY UPDATED: high-value Azure Security Center insights, tips, and operational solutions Reflecting updates through mid-2019, this book presents comprehensive Azure Security Center techniques for safeguarding cloud and hybrid environments. Leading Microsoft security and cloud experts Yuri Diogenes and Dr. Thomas Shinder help you apply Azure Security Center’s robust protection, detection, and response capabilities in key operational scenarios. You’ll walk through securing any Azure workload, and optimizing key facets of modern security, from policies and identity to incident response and risk management. Brand-new coverage includes single-click remediation, IoT, improved container security, Azure Sentinel, and more. Whatever your security role, you’ll learn how to save hours, days, or even weeks by solving problems in the most efficient and reliable ways possible. Two of Microsoft’s leading cloud security experts show how to: <ul>
<li>Implement a comprehensive new security paradigm designed specifically for cloud and hybrid environments </li> <li>Gain visibility and control to secure all key workloads</li> <li>Incorporate Azure Security Center into your security operations center, and integrate Azure AD Identity Protection Center and third-party solutions</li> <li>Adapt Azure Security Center’s built-in policies and definitions for your organization</li> <li>Perform security assessments, and implement Azure Security Center recommendations fast with single-click remediation</li> <li>Use incident response features to detect, investigate, and address threats</li> <li>Create high-fidelity fusion alerts to focus attention on your most urgent security issues</li> <li>Implement application whitelisting and just-in-time VM access</li> <li>Assess IoT device security with the Azure IoT Hub managed service</li> <li>Monitor user behavior and access, and investigate compromised or misused credentials</li> <li>Integrate Microsoft’s new Azure Sentinel Security Information and Event Management (SIEM) platform</li> <li>Customize and perform operating system security baseline assessments</li> </ul> About This Book <ul>
<li>For cloud architects, designers, implementers, operations professionals, and security specialists working in Microsoft Azure cloud or hybrid environments</li> <li>For all IT professionals and decision-makers concerned with the security of Azure environments</li> </ul>

Microsoft Azure Security Center (IT Best Practices - Microsoft Press)

Computers & Technology

Diogenes, Yuri

Shinder, Tom

Networking & Cloud Computing

Microsoft Press

Microsoft Azure Sentinel Plan, deploy, and operate Azure Sentinel, Microsoft’s advanced cloud-based SIEM Microsoft’s cloud-based Azure Sentinel helps you fully leverage advanced AI to automate threat identification and response — without the complexity and scalability challenges of traditional Security Information and Event Management (SIEM) solutions. Now, three of Microsoft’s leading experts review all it can do, and guide you step-by-step through planning, deployment, and daily operations. Leveraging in-the-trenches experience supporting early customers, they cover everything from configuration to data ingestion, rule development to incident management… even proactive threat hunting to disrupt attacks before you’re exploited. Three of Microsoft’s leading security operations experts show how to: • Use Azure Sentinel to respond to today’s fast-evolving cybersecurity environment, and leverage the benefits of its cloud-native architecture • Review threat intelligence essentials: attacker motivations, potential targets, and tactics, techniques, and procedures • Explore Azure Sentinel components, architecture, design considerations, and initial configuration • Ingest alert log data from services and endpoints you need to monitor • Build and validate rules to analyze ingested data and create cases for investigation • Prevent alert fatigue by projecting how many incidents each rule will generate • Help Security Operation Centers (SOCs) seamlessly manage each incident’s lifecycle • Move towards proactive threat hunting: identify sophisticated threat behaviors and disrupt cyber kill chains before you’re exploited • Do more with data: use programmable Jupyter notebooks and their libraries for machine learning, visualization, and data analysis • Use Playbooks to perform Security Orchestration, Automation and Response (SOAR) • Save resources by automating responses to low-level events • Create visualizations to spot trends, identify or clarify relationships, and speed decisions • Integrate with partners and other third-parties, including Fortinet, AWS, and Palo Alto

Microsoft Azure Sentinel: Planning and implementing Microsoft’s cloud-native SIEM solution (IT Best Practices - Microsoft Press)

DiCola, Nicholas

Trull, Jonathan

Prepare for Microsoft Exam AZ-500:&nbsp;Demonstrate your real-world knowledge of Microsoft Azure security, including tools and techniques for protecting identity, access, platforms, data, and applications, and for effectively managing security operations. Designed for professionals with Azure security experience, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Azure Security Engineer Associate level.&nbsp;&nbsp; &nbsp; Focus on the expertise measured by these objectives: * Manage identity and access * Implement platform protection * Manage security operations * Secure data and applications &nbsp; This Microsoft Exam Ref: * Organizes its coverage by exam objectives * Features strategic, what-if scenarios to challenge you * Assumes you have expertise implementing security controls and threat protection, managing identity and access, and protecting assets in cloud and hybrid environments &nbsp; About the Exam Exam AZ-500 focuses on the knowledge needed to manage Azure Active Directory identities; configure secure access with Azure AD; manage application access and access control; implement advanced network security; configure advanced security for compute; monitor security with Azure Monitor, Azure Firewall manager, Azure Security Center, Azure Defender, and Azure Sentinel; configure security policies; configure security for storage and databases; and configure and manage Key Vault. &nbsp; About Microsoft Certification&nbsp; Passing this exam fulfills your requirements for the Microsoft Certified: Azure Security Engineer Associate credential, demonstrating your expertise as an Azure Security Engineer capable of maintaining security posture, identifying and remediating vulnerabilities, implementing threat protection, and responding to incident escalations as part of a cloud-based management and security team. &nbsp; See full details at: microsoft.com/learn

Exam Ref AZ-500 Microsoft Azure Security Technologies

Thomas, Orin

Certification

The definitive practical guide to Azure Security Center, 50%+ rewritten for new features, capabilities, and threats Extensively revised for updates through spring 2021 this guide will help you safeguard cloud and hybrid environments at scale. Two Azure Security Center insiders help you apply Microsoft's powerful new components and capabilities to improve protection, detection, and response in key operational scenarios. You'll learn how to secure any workload, respond to new threat vectors, and address issues ranging from policies to risk management. This edition contains new coverage of all Azure Defender plans for cloud workload protection, security posture management with Secure Score, advanced automation, multi-cloud support, integration with Azure Sentinel, APIs, and more. Throughout, you'll find expert insights, tips, tricks, and optimizations straight from Microsoft's ASC team. They'll help you solve cloud security problems far more effectively--and save hours, days, or even weeks. Two of Microsoft's leading cloud security experts show how to: <ul> <li>Understand today's threat landscape, cloud weaponization, cyber kill chains, and the need to "assume breach"</li> <li>Integrate Azure Security Center to centralize and improve cloud security, even if you use multiple cloud providers</li> <li>Leverage major Azure Policy improvements to deploy, remediate, and protect at scale</li> <li>Use Secure Score to prioritize actions for hardening each workload</li> <li>Enable Azure Defender plans for different workloads, including Storage, KeyVault, App Service, Kubernetes and more</li> <li>Monitor IoT solutions, detect threats, and investigate suspicious activities on IoT devices</li> <li>Reduce attack surfaces via just-in-time VM access, file integrity monitoring, and other techniques</li> <li>Route Azure Defender alerts to Azure Sentinel or a third-party SIEM for correlation and action</li> <li>Access alerts via HTTP, using ASC's REST API and the Microsoft Graph Security API</li> <li>Reliably deploy resources at scale, using JSON-based ARM templates</li> </ul> About This Book For architects, designers, implementers, operations professionals, developers, and security specialists working in Microsoft Azure cloud or hybrid environments For all IT professionals and decisionmakers concerned with the security of Azure environments

Janetscheck, Tom

Prepare for Microsoft Exam SC-900 and help demonstrate your real-world knowledge of the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. Designed for business stakeholders, new and existing IT professionals, functional consultants, and students, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Security, Compliance, and Identity Fundamentals level. &nbsp; Focus on the expertise measured by these objectives: * Describe the concepts of security, compliance, and identity * Describe the capabilities of Microsoft identity and access management solutions * Describe the capabilities of Microsoft security solutions * Describe the capabilities of Microsoft compliance solutions &nbsp; This Microsoft Exam Ref: * Organizes its coverage by exam objectives * Features strategic, what-if scenarios to challenge you * Assumes you are a business user, stakeholder, consultant, professional, or student who wants to create holistic, end-to-end solutions with Microsoft security, compliance, and identity technologies &nbsp; About the Exam Exam SC-900 focuses on knowledge needed to describe: security and compliance concepts and methods; identity concepts; Azure AD identity services/types, authentication, access management, identity protection, and governance; Azure, Azure Sentinel, and Microsoft 365 security management; Microsoft 365 Defender threat protection and Intune endpoint security; Microsoft 365 compliance management, information protection, governance, insider risk, eDiscovery, and audit capabilities; and Azure resource governance. &nbsp; About Microsoft Certification Passing this exam fulfills your requirements for the Microsoft Certified: Security, Compliance, and Identity Fundamentals certification, helping to demonstrate your understanding of the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. With this certification, you can move on to earn more advanced related Associate-level role-based certifications. &nbsp; See full details at: microsoft.com/learn

Exam Ref SC-900 Microsoft Security, Compliance, and Identity Fundamentals

McKinnerney, Kevin

Morowczynski, Mark

Prepare for Microsoft Exam SC-200--and help demonstrate your real-world mastery of skills and knowledge required to work with stakeholders to secure IT systems, and to rapidly remediate active attacks. Designed for Windows administrators, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Associate level. &nbsp; Focus on the expertise measured by these objectives: <ul> <li>Mitigate threats using Microsoft 365 Defender</li> <li>Mitigate threats using Azure Defender</li> <li>Mitigate threats using Azure Sentinel</li> </ul> &nbsp; This Microsoft Exam Ref: <ul> <li>Organizes its coverage by exam objectives</li> <li>Features strategic, what-if scenarios to challenge you</li> <li>Assumes you have experience with threat management, monitoring, and/or response in Microsoft 365 environments</li> </ul> &nbsp; About the Exam Exam SC-200 focuses on knowledge needed to detect, investigate, respond, and remediate threats to productivity, endpoints, identity, and applications; design and configure Azure Defender implementations; plan and use data connectors to ingest data sources into Azure Defender and Azure Sentinel; manage Azure Defender alert rules; configure automation and remediation; investigate alerts and incidents; design and configure Azure Sentinel workspaces; manage Azure Sentinel rules and incidents; configure SOAR in Azure Sentinel; use workbooks to analyze and interpret data; and hunt for threats in the Azure Sentinel portal. &nbsp; About Microsoft Certification Passing this exam fulfills your requirements for the Microsoft 365 Certified: Security Operations Analyst Associate certification credential, demonstrating your ability to collaborate with organizational stakeholders to reduce organizational risk, advise on threat protection improvements, and address violations of organizational policies. &nbsp; See full details at: microsoft.com/learn

Exam Ref SC-200 Microsoft Security Operations Analyst

YOUNG, SARAH

Mowrer, Jake

Prepare for Microsoft Exam AZ-500: Demonstrate your real-world knowledge of Microsoft Azure security, including tools and techniques for protecting identity, access, platforms, data, and applications, and for effectively managing security operations. Designed for professionals with Azure security experience, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Azure Security Engineer Associate level. 
Focus on the expertise measured by these objectives: Manage identity and access Implement platform protection Manage security operations Secure data and applications 
This Microsoft Exam Ref: Organizes its coverage by exam objectives Features strategic, what-if scenarios to challenge you Assumes you have expertise implementing security controls and threat protection, managing identity and access, and protecting assets in cloud and hybrid environments 
About the Exam 
Exam AZ-500 focuses on the knowledge needed to manage Azure Active Directory identities; configure secure access with Azure AD; manage application access and access control; implement advanced network security; configure advanced security for compute; monitor security with Azure Monitor, Azure Firewall manager, Azure Security Center, Azure Defender, and Azure Sentinel; configure security policies; configure security for storage and databases; and configure and manage Key Vault. 
About Microsoft Certification 
Passing this exam fulfills your requirements for the Microsoft Certified: Azure Security Engineer Associate credential, demonstrating your expertise as an Azure Security Engineer capable of maintaining security posture, identifying and remediating vulnerabilities, implementing threat protection, and responding to incident escalations as part of a cloud-based management and security team. 
See full details at: microsoft.com/learn

Exam Ref AZ-500 Microsoft Azure Security Technologies, 2/e

The definitive practical guide to Microsoft Defender for Cloud covering new components and multi-cloud enhancements! 
Microsoft Defender for Cloud offers comprehensive tools for hardening resources, tracking security posture, protecting against attacks, and streamlining security management – all in one natively integrated toolset. Now, leading Microsoft security experts Yuri Diogenes and Tom Janetscheck help you apply its robust protection, detection, and response capabilities throughout your operations, protecting workloads running on all your cloud, hybrid, and on-premises platforms. 
This guide shows how to make the most of new components, enhancements, and deployment scenarios, as you address today's latest threat vectors. Sharing best practices, expert tips, and optimizations only available from Microsoft's Defender for Cloud team, the authors walk through improving everything from policies and governance to incident response and risk management. Whatever your role or experience, they'll help you address new security challenges far more effectively―and save hours, days, or even weeks. 
Two of Microsoft's leading cloud security experts show how to: Assess new threat landscapes, the MITRE ATT&CK framework, and the implications of ''assume-breach'' Explore Defender for Cloud architecture, use cases, and adoption considerations including multicloud with AWS and GCP Plan for effective governance, successful onboarding, and maximum value Fully visualize complex cloud estates and systematically reduce their attack surfaces Prioritize risks with Secure Score, and leverage at-scale tools to build secure cloud-native apps Establish consistent policy enforcement to avoid drift Use advanced analytics and machine learning to identify attacks based on signals from all cloud workloads Enhance security posture by integrating with the Microsoft Sentinel SIEM/SOAR, Microsoft Purview, and Microsoft Defender for Endpoint Leverage just-in-time VM access and other enhanced security capabilities 
About This Book For architects, designers, implementers, SecOps professionals, developers, and security specialists working in Microsoft Azure environments For all IT professionals and decision-makers concerned with securing modern hybrid/multicloud environments, cloud-native apps, and PaaS services

Microsoft Defender for Cloud (IT Best Practices - Microsoft Press)

Build next-generation security operations with Microsoft Sentinel 
Microsoft Sentinel is the scalable, cloud-native, security information and event management (SIEM) solution for automating and streamlining threat identification and response across your enterprise. Now, three leading experts guide you step-by-step through planning, deployment, and operations, helping you use Microsoft Sentinel to escape the complexity and scalability challenges of traditional solutions. Fully updated for the latest enhancements, this edition introduces new use cases for investigation, hunting, automation, and orchestration across your enterprise and all your clouds. The authors clearly introduce each service, concisely explain all new concepts, and present proven best practices for maximizing Microsoft Sentinel’s value throughout security operations.\nThree of Microsoft’s leading security operations experts show how to: Review emerging challenges that make better cyberdefense an urgent priority See how Microsoft Sentinel responds by unifying alert detection, threat visibility, proactive hunting, and threat response Explore components, architecture, design, and initial configuration Ingest alerts and raw logs from all sources you need to monitor Define and validate rules that prevent alert fatigue Use threat intelligence, machine learning, and automation to triage issues and focus on high-value tasks Add context with User and Entity Behavior Analytics (UEBA) and Watchlists Hunt sophisticated new threats to disrupt cyber kill chains before you’re exploited Enrich incident management and threat hunting with Jupyter notebooks Use Playbooks to automate more incident handling and investigation tasks Create visualizations to spot trends, clarify relationships, and speed decisions Simplify integration with point-and-click data connectors that provide normalization, detection rules, queries, and Workbooks\nAbout This Book For cybersecurity analysts, security administrators, threat hunters, support professionals, engineers, and other IT professionals concerned with security operations For both Microsoft Azure and non-Azure users at all levels of experience

Microsoft Azure Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution (IT Best Practices - Microsoft Press)

Turpijn, Tiander

Prepare for Microsoft Exam SC-100 and demonstrate your real-world mastery of skills and knowledge needed to design and evolve cybersecurity strategy for all aspects of enterprise architecture. Designed for experienced IT professionals, this Exam Ref focuses on critical thinking and decision-making acumen needed for success at the Microsoft Certiﬁed: Cybersecurity Architect Expert level. 
Focus on the expertise measured by these objectives: Design a Zero Trust strategy and architecture Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategies Design a strategy for data and applications Recommend security best practices and priorities 
This Microsoft Exam Ref: Organizes its coverage by exam objectives Features strategic, what-if scenarios to challenge you Assumes you have advanced security engineering experience and knowledge and experience with hybrid and cloud implementations 
About the Exam 
Exam SC-100 focuses on the knowledge needed to build overall security strategy and architecture; design strategies for security operations, identity security, and regulatory compliance; evaluate security posture; recommend technical strategies to manage risk; design strategies to secure server endpoints, client endpoints, and SaaS, PaaS, and IaaS services; specify application security requirements; design data security strategy; recommend security best practices based on Microsoft Cybersecurity Reference Architecture and Azure Security Benchmarks; use the Cloud Adoption Framework to recommend secure methodologies; use Microsoft Security Best Practices to recommend ransomware strategies. 
About Microsoft Certiﬁcation 
The Microsoft Certiﬁed: Cybersecurity Architect Expert certiﬁcation credential demonstrates your ability to plan and implement cybersecurity strategy that meets business needs and protects the organization’s mission and processes across its entire enterprise architecture. To fulﬁll your requirements, pass this exam and earn one of these four prerequisite certiﬁcations: Microsoft Certiﬁed: Azure Security Engineer Associate; Microsoft Certiﬁed: Identity and Access Administrator Associate; Microsoft365 Certiﬁed: Security Administrator Associate; Microsoft Certiﬁed: Security Operations Analyst Associate. 
See full details at: microsoft.com/learn

Exam Ref SC-100 Microsoft Cybersecurity Architect

Simos, Mark

Rodriguez, Gladys

See the best price to sell, buy, or rent books by Diogenes, Yuri. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Diogenes, Yuri

See the best price to sell, buy, or rent books by Diogenes, Yuri. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Microsoft Azure Security Center (IT Best Practices - Microsoft Press)

Microsoft Azure Sentinel: Planning and implementing Microsoft’s cloud-native SIEM solution (IT Best Practices - Microsoft Press)

Exam Ref AZ-500 Microsoft Azure Security Technologies

Microsoft Azure Security Center (IT Best Practices - Microsoft Press)

Exam Ref SC-900 Microsoft Security, Compliance, and Identity Fundamentals

Exam Ref SC-200 Microsoft Security Operations Analyst

Exam Ref AZ-500 Microsoft Azure Security Technologies, 2/e

Microsoft Defender for Cloud (IT Best Practices - Microsoft Press)

Microsoft Azure Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution (IT Best Practices - Microsoft Press)

Exam Ref SC-100 Microsoft Cybersecurity Architect