Azure Sentinel E Matlafatsa Ts'okelo le Karabelo tikolohong ea hau ea Leru

Selelekela

Kajeno, likhoebo lefatšeng ka bophara li hloka bokhoni bo matla ba ho arabela cybersecurity le ho lemoha litšokelo ho itšireletsa khahlanong le litlhaselo tse ntseng li eketseha. Azure Sentinel ke tlhaiso-leseling ea ts'ireletso ea Microsoft le taolo ea liketsahalo (SIEM) le ts'ireletso ea orchestration, automation, and response (SOAR) tharollo e ka sebelisoang bakeng sa tikoloho ea maru le sebakeng sa marang-rang. Tse ling tsa bokhoni ba eona li kenyelletsa litlhahlobo tse bohlale tsa ts'ireletso le ho tsoma litšokelo tse matla. Sengoliloeng sena, re tla sheba hore na likarolo tsa ho lemoha le ho araba litšokelo tsa Azure Sentinel li matlafatsa ts'ireletso ea tikoloho ea hau ea maru joang.

Background

Azure Sentinel ke sesebelisoa sa maru sa SIEM le tharollo ea SOAR. E lemoha le ho arabela litšokelong tsa ts'ireletso ka ho bokella lintlha ho tsoa ho li-log, liketsahalo, le litsebiso le ho sebelisa ho ithuta ka mochine le li-analytics tse bohlale. Sentinel e ka ntlafatsa ts'ebetso ea khoebo ea hau ka liketso tsa ho arabela ka boiketsetso le ho etsa lipatlisiso tsa litšokelo ha e ntse e senyeha habonolo le ho lekana litlhoko tsa khoebo ea hau. 

Boitsebiso ba Data

Sentinel e khona ho kenya data ho tsoa mehloling e fapaneng joalo ka liforomo tse ling tsa maru, lits'ebetso tsa tloaelo, le lits'ebetso tsa sebaka sa marang-rang. Joalo ka ts'ebeletso ea Microsoft, e ka kopanngoa habonolo le lits'ebeletso tse ngata tsa Microsoft joalo ka Azure Active Directory le Azure Security Center.

Ho Khetholla Kotsi le Ho Tsoma

Azure Sentinel e khona ho bona le ho hlokomelisa sistimi ea hau bakeng sa boits'oaro bo belaetsang ka ho sebelisa li-analytics tse bohlale le mekhoa ea ho ithuta ka mochini. E ntlafatsa bokhoni ba sehlopha sa hau sa ts'ireletso ea ho fumana lits'oso ka ho sefa le ho botsa lintlha tse felletseng.

Taolo ea Ketsahalo le Karabelo

Sentinel e fana ka leseli le felletseng ho litemoso tsa ts'ireletso ea hau ho netefatsa hore bahlahlobisisi ba ts'ireletso ba na le kutloisiso e felletseng ea boemo. Litlhokomeliso tse hlahisitsoeng li bohareng, li lumella lihlopha tsa hau tsa ts'ireletso hore li sebelisane habonolo lipatlisisong tsa tsona. Ha litemoso li fumanoa ke sistimi, Sentinel e sebelisa libuka tsa ho bapala ho fana ka likarabo tse ikemetseng ho thusa ho fokotsa litšokelo tse ka bang teng.

Tshireletso Orchestration le Automation

O ka hlophisa liketso tsa karabelo habonolo, oa iketsetsa tšebetso ea ts'ireletso, 'me oa etsa libuka tsa ho bapala ka bokhoni ba Azure Sentinel's SOAR. Lihlopha tsa hau tsa ts'ireletso joale li ka fokotsa liketsahalo tsa ts'ireletso le linako tsa ho arabela habonolo.

fihlela qeto e

Azure Sentinel e eme e le sesebelisoa se felletseng le se matla bakeng sa likhoebo tse batlang ho ntlafatsa ts'ireletso ea tsona holim'a maru. Ka bokhoni ba eona bo tsoetseng pele ba ho lemoha litšokelo, li-analytics tse bohlale, le likarolo tsa othomathike, Azure Sentinel e thusa mehato ea ts'ireletso e matla le linako tsa karabelo tse potlakileng ho fokotsa lits'oso tse ka bang teng. Ka ho hokahana ka mokhoa o se nang moeli le li-platform le lits'ebetso tse ling le ho fana ka taolo ea liketsahalo tse bohareng, Azure Sentinel e tla matlafatsa lihlopha tsa hau tsa ts'ireletso ho lemoha le ho arabela litšokelo tikolohong ea hau ea maru.