Manage SIEM, XDR, and threat intelligence from one place with new updates in the Microsoft Defender portal. Interact with all of your security data using generative AI with Microsoft Copilot for Security. View incidents across your digital estate-whether they're related to endpoints, SaaS services, your network in the cloud or on prem. This unified approach eliminates the inefficiency of SOC teams having to switch between multiple systems and manually piece together incident details, while maintaining all the current functionalities of each connected service.
Rob Lefferts joins Jeremy Chapman to discuss how the Defender experience has evolved into a unified security operations platform that combines threat detection, prevention, investigation, and response.
► QUICK LINKS:
00:00 - How Microsoft Defender has evolved
01:47 - Increase your SOC’s efficiency and speed
02:30 - GPT-based Copilot for Security
03:54 - See an active incident
05:45 - Attack disruption
06:48 - High-level recap with Security Copilot
07:39 - Unified advanced hunting
08:51 - Set it up
09:32 - Wrap up
► Link References
For more information, and to join our private preview go to aka.ms/SOCPlatform
► Unfamiliar with Microsoft Mechanics?
As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.
• Subscribe to our RU-vid: / microsoftmechanicsseries
• Talk with other IT Pros, join us on the Microsoft Tech Community: techcommunity.microsoft.com/t...
• Watch or listen from anywhere, subscribe to our podcast: microsoftmechanics.libsyn.com...
► Keep getting this insider knowledge, join us on social:
• Follow us on Twitter: / msftmechanics
• Share knowledge on LinkedIn: / microsoft-mechanics
• Enjoy us on Instagram: / msftmechanics
• Loosen up with us on TikTok: / msftmechanics
#SIEM #XDR #MicrosoftDefender #MicrosoftSentinel
3 июл 2024
