From the course: AI-Driven Threat Response with Microsoft Defender for Cloud
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Microsoft threat response system - Azure Tutorial
From the course: AI-Driven Threat Response with Microsoft Defender for Cloud
Microsoft threat response system
- [Instructor] The Microsoft Threat Response System is a comprehensive security framework that integrates AI-driven detection, automation, and response capabilities to protect cloud and hybrid environments from cyber threats. Imagine you are the head of security for a thriving e-commerce company, swift mats when suddenly, Microsoft Defender Cloud sends an alert, reading, "Suspicious login attempts detected." Within moments, more alerts, like "Failed authentication attempt," "Admin disabling security logs," and "Unauthorized script running on your database," begin to flood in. The purpose and the work of Microsoft Sentinel in this case is to take up an automated process before panic sets in/ Microsoft Sentinel AI would correlate the anomalies, identify the ransomware attack in progress, and instantly, Defender for cloud isolates affected machines within the network. Microsoft Sentinel will proceed to block the attacker's IP, and Defender for Identity traces the bridge to a phishing…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.