Next Generation SOC

[Sachin Jung Karki]

Hi,

I want to create a document on Microsoft Azure Sentinel for SOC providers. Basically what I want to do on this document is as follow:

1. Introduction of Azure Sentinel (Architecture, How it works, what are the benefits, etc.)

2. How to enable Azure Sentinel (Azure subscription, Pricing and Pricing options, storage, analytics and other add-ins)

3. How to configure and connect different types of SIEM, Firewalls, End Points, Devices and Syslog

4. Integrate 3rd party services and customize Dashboard (Open Threat eXchange, PoC, etc.)

4.1 Risk and Threat Assessment

4.2 Integrate Vulnerability Assessment

4.3 Integrate Penetration Testing

4.4 Integrating Information System Audit

4.5 Integrating SAM and IT Inventory

4.6 Integrating Software Licensing (Microsoft Products) Status Verification

5. How to hunt cyber threats (Detect, Identify, and Respond)

5.1 On-Premises Network, System, Devices, Services, Software Platforms

5.2 Branch and Mobile Network and Devices

5.3 Cloud Services (VPS, Microsoft Cloud Services, Other Cloud Services)

6. Threat response

7. Recording an incident and incident handling process

8. Creating an incident report(s)

Basically what I want to create is how to build a Security Operation Center with Azure Sentinel. Can you help me to create this document?

[#2]

@Sachin Jung Karki 

I would like to help on some topics! At the moment I am doing research on Azure Sentinel for my graduation project. 

[#3]

@Sachin Jung Karki You should be able to capture most of that from here:

https://techcommunity.microsoft.com/t5/azure-sentinel/azure-sentinel-resource-terminus-board-here/ba...

[#4]

Hello @Sachin Jung Karki 

Have you finish this Document? I wold Like to desing the Next Generation SOC in my company and I think your paper can be great in my research about this kind of services...

thanks...