Automation in Microsoft Sentinel

Intermediate
Security Operations Analyst
Azure
Microsoft Sentinel
Microsoft Defender XDR

By the end of this module, you're able to use automation rules in Microsoft Sentinel to automated incident management.

Learning objectives

After completing this module, you're able to:

  • Explain automation options in Microsoft Sentinel
  • Create automation rules in Microsoft Sentinel

Prerequisites

  • Familiarity with Microsoft Sentinel and its components
  • Familiarity with the Microsoft Defender portal

Get started with Azure

Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.