Managing Microsoft Sentinel at Scale with Workspace Manager

Поділитися
Вставка
  • Опубліковано 5 вер 2024

КОМЕНТАРІ • 8

  • @Suidloc
    @Suidloc Рік тому

    Massive achievement and well deserved Jeroen, congratulations :)

  • @junlu3835
    @junlu3835 Рік тому +1

    As always, hit the like button before I watch ^_^

  • @vipuldabhi6971
    @vipuldabhi6971 Рік тому +1

    Please come up with a video on Azure Lighthouse

  • @progod6017
    @progod6017 Рік тому +1

    Is workspace manager really that great? Stand alone it misses a few options DevOps/Git provide. Do you believe setting up a hybrid between both could be the way to go?
    I m desperately looking for reasons to prefer workspace manager, as the management look A LOT easier.

  • @Deleteyouagain
    @Deleteyouagain Рік тому +1

    Hi i have a question, is it possible to use the workspace manager to view sentinel incidents from those muliple child workspaces into the managment workspace? Thanks Jeroen

    • @AzureVlog
      @AzureVlog  Рік тому +2

      No. It is just for content distribution. You can use the incident view to view incidents of multiple workspaces. Have a look here: learn.microsoft.com/en-us/azure/sentinel/multiple-workspace-view

  • @cerebro05cerebro12
    @cerebro05cerebro12 Рік тому

    Are we able to tune rules in child workspaces without them being over written again from the central workspace?

  • @shaunrod114
    @shaunrod114 Рік тому

    Hey nice content
    Are there any options to onboard custom logs in child workspace ? If yes how ? or that needs a Data connector to onboard logs in the child workspace ?