Event banner
Microsoft Sentinel Ask Microsoft Anything (AMA)
Event Ended
Wednesday, Sep 06, 2023, 08:00 AM PDTEvent details
Welcome to the Microsoft Sentinel Ask Microsoft Anything event page. Please join us to ask all your burning questions about Microsoft Sentinel directly to the Microsoft product team!
An AMA is a live text-based online event similar to an "Ask Me Anything," on Reddit. This AMA gives you the opportunity to connect with members of the Sentinel product group who will be on hand to answer your questions and listen to feedback.
Feel free to post your questions about Microsoft Sentinel anytime in the comments before the event starts, although the team will only be answering questions during the live hour.
Trevor_Rusher
Updated Sep 06, 2023
- Trevor_Rusher
Community Manager
Thank you all for joining our AMA today! I'll be locking this event to new questions but you should always be able to see all the questions and answers here on this page in perpetuity, so feel free to bookmark. If you have more questions related to Microsoft Sentinel feel free to check out the Sentinel Discussion Space here on Tech Community. Also please stay tuned for our next AMA here on the SCI Tech Community Event Space. - keen_johannessenCopper ContributorWhat are the benefits of using Azure Monitor and Azure Security Center in conjunction with Microsoft Sentinel? How does Microsoft Sentinel leverage AI and machine learning for threat detection and analysis?
- GBushey
Microsoft
In terms of AI and ML, Microsoft Sentinel provides the Fusion rules which use ML to help determine if some lower severity incidents are actually leading up to a larger issue. There is also the ML Behavior Analytics rules that help to determine if logins to systems are atypical, In addition, you can develop and use your own ML models (BYOML) https://learn.microsoft.com/en-us/azure/sentinel/bring-your-own-ml We will also be working to bring in OpenAI and other AI based tools: https://techcommunity.microsoft.com/t5/manufacturing/introduction-to-openai-and-microsoft-sentinel/ba-p/3761907 - GBushey
Microsoft
Microsoft Sentinel is built on top of Azure Monitor’s Log Analytics so the information that gets passed to Azure Monitor will be available to Microsoft Sentinel. Adding Azure Security Center information will provide better overall security to your environment. Here is a slightly older article that can help: https://azure.microsoft.com/en-us/blog/securing-the-hybrid-cloud-with-azure-security-center-and-azure-sentinel/
- keen_johannessenCopper ContributorCan you explain the process of setting up and configuring Microsoft Sentinel for a new organization?
- GBushey
Microsoft
Here is a good link to get you started: https://learn.microsoft.com/en-us/azure/sentinel/quickstart-onboard
- keen_johannessenCopper Contributor
Hallo Team,
I like to know what is the best target groupe of customer to use Sentinel is it SME or entriprise companyes that is the best to target?
- GBushey
Microsoft
There really isn’t a target customer for MS Sentinel. Due to the fact that it is a Software As A Service platform and you are billed based on ingestion, it can work for a very small customer or an enterprise customer.- keen_johannessenCopper ContributorWhat type of License do users need have for MS Sentinel ?
- Trevor_Rusher
Community Manager
Welcome to the Microsoft Sentinel AMA! The event begins NOW! This live hour gives you the opportunity to ask questions directly to the Microsoft team. Please post any questions in a separate, new comment thread on this event. Microsoft team- please introduce yourself on this thread to let our users know who you are and what you do!- keen_johannessenCopper ContributorHi I am Keen Johannessen from Denmark With Microsoft 365 & Azure security as the focal point, I have 20 years of experience with IT solutions used for teamwork, communication and document management. Through my experiences as a business consultant, implementation consultant, advisor, trainer, hands on project manager and project owner, I have worked with all versions of Exchange Online, SharePoint and SharePoint Online in Office 365 and Microsoft 365, as well as all the associated technologies. In addition to having deep knowledge of the Microsoft 365 suite, I also excel in OneDrive for Business, Teams, PowerAutomate, Power Apps, Yammer, and other relevant Microsoft 365 technologies, which benefit end users in their daily life and empower them to work more efficient in their digital workplace.
- AMateos91Iron ContributorHello! I am Abraham Mateos, Founder and CEO at Kumy Solutions, and trainee and Member of different NASA programs and communities. I am currently working on a global pioneering project which involves some Microsoft productos and services. Nice to meet you all. Best regards.
- GBushey
Microsoft
Hi! I'm Gary Bushey, a Microsoft Sentinel CxE. I spend my time working with the customers and the product team to help resolve any issues that have come up as well as facilitating requests for new features.
- Trevor_Rusher
Community Manager
I'm very excited to share this upcoming AMA with the Sentinel team in a week! Remember to please ask your questions down here in a new comment thread. You can ask them at any time leading up to or during the event but the team won't be answering questions until the live hour. Thanks!
Location
Microsoft Tech Community