This book introduces readers to the wide array of security features and capabilities available in Azure Security Center. After being introduced to all of these security options, you will dig in to see how they can be used in a number of operational security scenarios so that you can get the most out of the protect, detect, and respond skills provided only by Azure Security Center. This book helps you secure Azure assets no matter what level of security experience they have. You will save hours, days and weeks of time by removing the trial and error by stepping them through how to protect, detect and respond to security threats better than ever by knowing how to get the most out of Azure Security Center.
Key topics include:
- What is Azure Security Center and why did we build it that way
- What can Azure Security Center to do help protect, detect and response against security threats for customers with any level of security expertise
- Insights from customer experiences on how to get the most out of Azure Security Center to reduce their chances of attack
- Step-wise, intuitive walkthoughs based on real-world scenarios that help readers understand how to the use the product and get the most out of it
- How to integrate 3rd party solutions so that they can create the ultimate hybrid security solutions.
Yuri Diogenes (Keller, TX) is a Senior Content Developer on the CSI Enterprise Mobility Team, focusing on BYOD and Azure Security Center. Previously, Yuri has worked as a writer for the Windows Security Team and as a Support Escalation Engineer for the CSS Forefront Team, also at Microsoft. He has a Master of Science degree in Cybersecurity Intelligence and Forensics from UTICA College and an MBA from FGF in Brazil, and he holds several industry certifications. He is co-author of Enterprise Mobility Suite: Managing BYOD and Company-Owned Devices (Microsoft Press, 2015), Microsoft Forefront Threat Management Gateway (TMG) Administrator's Companion (Microsoft Press, 2010), and three other Forefront titles from Microsoft Press.
Dr. Thomas Shinder (Rowlett, TX) is a program manager in Azure Security Engineering and a 20-year veteran in IT security. Tom is best known for his work with ISA Server and TMG, publishing nine books on those topics. He was also the leading voice at ISAserver.org. After joining Microsoft in 2009, Tom spent time on the UAG DirectAccess team and then took a 3-year vacation from security to be a cloud infrastructure specialist and architect. He's now back where he belongs in security, and spends a good deal of time hugging his Azure Security Center console and hiding his secrets in Azure Key Vault.
Chapter 1 — Threat Landscape
Chapter 2 — Azure Security Center
Chapter 3 — Policy Management
Chapter 4 — Strength your Security Posture
Chapter 5 — Advanced Cloud Defense
Chapter 6 — Threat Detection
Chapter 7 - Using Threat Intelligence to Identity Security Issues
Chapter 8 — Exporting Logs to a SIEM Solution
Chapter 9 — Integration with other Microsoft solutions
Chapter 10 — Accessing Security Center Alerts from API and Intelligent Secure Graph
Appendix 1 — Automation using ARM Template
Other versions by this Author