Session

Incident investigations and threat hunting in Microsoft Unified Security Operations

Deep dive into real-world incident investigations and threat hunting utilizing Microsoft’s Unified Security Operations platform. Discover the synergy of Microsoft Sentinel, Defender XDR, and Security Copilot in providing comprehensive visibility, rapid response, and AI-driven decision-making.

In this session, we will explore a real case scenario, focusing on:

- Detecting and analyzing intricate threats spanning endpoints, identities, cloud environments, and beyond.

- Leveraging Microsoft Defender XDR for correlated insights and automated response

- Leveraging Microsoft Sentinel for scalable SIEM functionalities and personalized threat detection with KQL.

- Enhancing analyst workflows with generative AI and contextual guidance through Security Copilot.

Uros Babic

Senior Security Engineer at Crayon, Microsoft Security MVP, MCT

Belgrade, Serbia

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.

Jump to top