Please join us for our October 2019 Meetup with Ofer Shezaf from Microsoft, who will present Azure Sentinel.
Azure Sentinel is Microsoft's new cloud-native SIEM. In this meetup, I will use Azure Sentinel to walk through a full real-world SOC detection, investigation, and hunting scenario. I hope this will provide a deep insight into Sentinel while allowing us to learn more about the inner workings of a SOC. No slides. A promise.
Ofer Shezaf is a principal product manager with the Azure Sentinel product group. Ofer brings with him extensive experience in the SIEM world, working as a product director at HP ArcSight. Before moving to product management, Ofer led security research at HP Fortify and was the creator of the OWASP ModSecurity Core Rule Set open source project. Like many others at Microsoft Israel R&D Center, Ofer started his career in Cyber at the Israeli Intelligence Corps.
18:30 - 19:00: Food, drinks & icebreaker conversations
19:00 - 19:15: Welcome, Community, Events & News update
19:15 - 20:15: Ofer Shezaf: Deep dive into the new Azure Sentinel service
20:15 - 21:00: Q&A
Join us this evening to learn (more) about Azure Infrastructure as Code using Real Code from Azure MVP David O'Brien who will be visiting us from Australia.
Everybody wants APIs nowadays. Everybody wants containers nowadays. However, there seems to be a lack of focus on providing real APIs on containers with PowerShell. Even though there are ways to achieve modern applications with PowerShell as well.
In this fast-paced, demo-filled session we will go from 0 to a fully working, public API running on Azure Kubernetes Services written in PowerShell, deployed using Pulumi infrastructure as real code.
Be prepared for a lot of code and new concepts along our way to building a modern PowerShell based web application.
David is the founder of XIRUS Pty Ltd (https://xirus.com.au) focusing on enabling companies to move workloads to the cloud (Azure or AWS) with a strong emphasis on security, automation, governance and compliance.
He has held a Microsoft MVP award for many years including the prestigious MVP for Azure.
A co-organiser of the Melbourne Microsoft Cloud and Datacentre meetup he also regularly speaks at international conferences and combines his interest to travel the world with his passion to share IT stories with the community.
David's personal blog can be found on https://david-obrien.net. In addition to blogging, he has also published online training courses on Pluralsight and "A Cloud Guru".
18:30 - 19:15: Food, Drinks & Icebreaker Conversations
19:15 - 19:30: Welcome and News & Events Update
19:30 - 20:45: David O'Brien - Azure Infrastructure as Code using Real Code
20:45 - 21:00: Q&A and Conversations (Continued)