RunAs Radio Microsoft Sentinel with Sarah Young
Jun 7, 2023
Richard talks to Sarah Young, Cloud Security Advocate for Microsoft, about Microsoft Sentinel, the company's SIEM solution. They discuss tools that feed into Sentinel, processing raw logs, and billing for the service. They highlight the importance of a SIEM in incident response and the need to assume breach. They also explore the hacker mindset, good security hygiene, and concerns around false positives in security systems.
Chapters
Transcript
Episode notes
1 2 3 4 5 6 7 8
Introduction
00:00 • 2min
Pre-Pandemic Travel Experiences and Long Haul Flights
01:36 • 2min
The Challenges of Traveling to and from Australia
03:31 • 13min
The Importance of a SIEM in Incident Response
16:31 • 3min
The Importance of Assuming You Have Been Breached
19:43 • 4min
The Hacker Mindset and Importance of Security
23:54 • 2min
Microsoft Defense report and the importance of security hygiene
25:39 • 16min
False Positives in Security Systems
42:00 • 7min