aOS Monaco 2019 - A7 - Sécurisez votre SI et vos services Office 365 partie 2 - Seyfallah Tagrerout
•
0 j'aime•210 vues
aOS Monaco 2019 - A7 - Sécurisez votre SI et vos services Office 365 partie 2 - Seyfallah Tagrerout
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à aOS Monaco 2019 - A7 - Sécurisez votre SI et vos services Office 365 partie 2 - Seyfallah Tagrerout
Similaire à aOS Monaco 2019 - A7 - Sécurisez votre SI et vos services Office 365 partie 2 - Seyfallah Tagrerout (20)
Plus de aOS Community
Plus de aOS Community (20)
Dernier
Dernier (20)
aOS Monaco 2019 - A7 - Sécurisez votre SI et vos services Office 365 partie 2 - Seyfallah Tagrerout
- 1. 1 aOS Monaco 26/09/2019 Sécurisez votre SI et services Part 2 Microsoft Threat Protection Seyfallah Tagrerout
- 2. aOS Monaco 26/09/2019 MERCI à nos sponsors
- 3. HELLO!HELLO! 3 Blog https://seyfallah-it.blogspot.com Blog https://seyfallah-it.blogspot.com AiM ServicesAiM Services Architect Team Lead Architect Team Lead
- 4. 4
- 5. AgendaAgenda Microsoft Threat Protection • (Re)-Introduction Identity • Azure Advanced Threat Protection Cloud and datacenter • Azure Security Center SIEM • Azure Sentinel
- 6. 6
- 7. 7 Microsoft Threat Protection services Microsoft Threat Protection services Azure Sentinel MDAATPAATP Azure Security Center Office 365 ATP Azure Active Directory Cloud app security
- 8. 8 ◦ “Through 2020, 95 percent of cloud security failures will be the customer's fault” – Gartner
- 9. 9 Cloud security challengesCloud security challenges Management is increasingly distributed Cloud environments are more dynamic A new approach is required
- 10. THAT EMPOWERS CUSTOMERS Encryption Secure Networking Identity & Access Partner Solutions Azure Security Center A TRUSTED CLOUD PLATFORM Security Privacy and Control Transparency Compliance
- 11. 11 PARTIE 1
- 12. 12 IdentityIdentity Azure ATP • Detect and investigate advanced attacks • compromised identities • Insider threats
- 13. Accountenumeration Usersgroupmembershipenumeration Users&IPaddressenumeration Hosts&servernameenumeration(DNS) Pass-the-Ticket Pass-the-Hash Overpass-the-Hash Reconnaissance ! ! ! Compromised Credential Lateral Movement Domain Dominance Goldenticketattack DCShadow SkeletonKey RemotecodeexecutiononDC ServicecreationonDC Detect advanced attacks throughout the kill chainDetect advanced attacks throughout the kill chain Bruteforceattempts SuspiciousVPNconnection Suspiciousgroupsmembershipmodifications HoneyTokenaccountsuspiciousactivities
- 15. 15 How Azure ATP worksHow Azure ATP works ANALYZE USER BEHARIOR INVESTIGATE AND RESPOND MONITOR ACTIVITIESUSERS DEVICES DATA DETECT & ALERT
- 19. 19 DEMODEMO
- 20. 20 PARTIE 2 Image by Julius Silver from Pixabay
- 21. 21 Strengthen security posture Protect against threats Get secure faster Azure Security Center
- 22. 22 Azure Security CenterAzure Security Center Strengthensecurityposture Continuouslyassess securitystate Manage organizationalsecuritypolicy and compliance Optimize andimprove securityby configuring recommendedcontrols
- 23. 23 Azure Security CenterAzure Security Center
- 24. 24 Azure Security CenterAzure Security Center
- 25. 25 Azure Security CenterAzure Security Center Protectagainst threats Detectthreatsacross IaaS and PaaS services using advancedanalytics Detectand block advancedmalware and threatsfor servers Reduce exposure to brute force attacks Protectdataservicesagainst maliciousattacks
- 26. 26 Azure Security CenterAzure Security Center
- 27. 27 Azure Security CenterAzure Security Center Get secure faster Extend to server workloads running in other clouds and on-premises datacenter Automatically discover and onboard Azure resources Integrate with existing workflows and tools (SIEM, NG Firewall..)
- 28. Export to Excel and Power BI Security Center ArchitectureSecurity Center Architecture IP Geotagging, … Netflow, SQL DB and Storage Logs, … Windows Events, Syslog, CEF, Configurations Threat Detections, Prescriptive Recommendations Security Dashboards Deliver Rapid Insights into Security State Across All Workloads Actionable Security Recommendations Investigation Tools and Log Search Curated, Prioritized Security Alerts Security Dashboards Deliver Rapid Insights into Security State Across All Workloads REST APIs NotificationsAutomation
- 29. 29 DEMODEMO
- 30. 30 PARTIE 3
- 33. 33 Azure SentinelAzure Sentinel GA – 9/24/2019 Connect to all your Data Workbooks Analytics Security automation and orchestration Investigation Hunting
- 35. 35 Azure SentinelAzure Sentinel Pay As you Go
- 36. 36 DEMODEMO
- 37. 37 CONCLUSION Photo by Kit Suman on Unsplash
- 39. 39 MERCI POUR VOTRE ATTENTION Photo by Kit Suman on Unsplash