Security, Microsoft Sessions

TT05 A Day in the Life of an Microsoft Sentinel Analyst

August 9th, 2022

9:30am - 10:45am

Level: Advanced

Rod Trent

Senior Cloud Security Advocate and Global Microsoft Sentinel SME,


You may know how to use Microsoft Sentinel to ingest your log files and allow the system to work it's magic in creating alerts and incidents for investigations. But, wouldn't it be nice to get a real feel for how this product will impact your daily life and your organization in a positive manner? In this session, we bring it all together and provide real-world examples through a standard SOC workflow - applying each Microsoft Sentinel feature to each step in the workflow process. You are the star. We simply provide the script so you picture yourself as the top Microsoft Sentinel analyst on your team.

You will learn:

  • Which features to use for daily tasks
  • Build a process for managing security tasks daily, weekly, and monthly
  • Assign proper duties to the right skillsets