Microsoft Sentinel Workshop

Stop Threats Before They Cause Harm with Microsoft Sentinel Engagement

Receive an overview of Microsoft Sentinel along with insights on active threats to your Microsoft 365 cloud and on-premises environments with our Microsoft Sentinel Engagement.  

Learn more

Embrace Proactive Threat Management

As IT becomes more strategic, the importance of security grows daily. Security information and event management (SIEM) solutions built for yesterday’s environments struggle to keep pace with today’s challenges—let alone tomorrow’s unimagined risks.  

That’s why Microsoft developed Microsoft Sentinel, a fully cloud-native SIEM.  

Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. 

Choose the Approach that’s Best for You

Every organisation is different, so this engagement can be customised to fit your environment and goals. We can provide either of two scenarios:  

  • Remote Monitoring – If your organisation doesn’t have its own security operations centre (SOC) or if you want to offload some monitoring tasks, we will demonstrate how CWSI can perform remote monitoring and threat hunting for you.  
  • Joint Threat Exploration – If your organisation is interested in learning how to integrate Microsoft Sentinel in your existing SOC by replacing or augmenting an existing SIEM, we will work with your SecOps team and provide additional readiness to bring them up to speed. 

Engagement Objectives

Through this engagement, we will work with you to: 

  • Discover threats to your Microsoft 365 cloud and on-premises environment across email, identity and data.
  • Understand how to mitigate threats by showing how Microsoft 365 and Azure security products can help mitigate and protect against threats that are found.
  • Plan next steps and provide information to build a business case for a production deployment roadmap.

In addition, depending on the selected scenario, you will also:

  • Experience the benefits of a managed SIEM with a true cloud native SIEM, managed and monitored by our cybersecurity experts. (Remote Monitoring scenario).
  • Receive hands-on experience, learn how to discover and analyse threats using Microsoft Sentinel and how to automate your Security Operations to make it more effective. (Joint Threat Exploration scenario).

    What We’ll Do

    • Analyse your requirements and priorities for a SIEM deployment. 
    • Define scope & deploy Microsoft Sentinel in your production environment. 
    • Remote monitoring (optional component) of Microsoft Sentinel incidents and proactive threat hunting to discover attack indicators.  
    • Explore threats and demonstrate how to automate responses and perform threat hunting. 
    • Recommend next steps on how to proceed with a production implementation of Microsoft Sentinel.  

    Engagement Highlights

    • Understand the features and benefits of Microsoft Sentinel. 
    • Gain visibility into threats across email, identity, and data.
    • Better understand, prioritise, and mitigate potential threat vectors.
    • Create a defined deployment roadmap based on your environment and goals. 
    • Develop joint plans and next steps.