The Information Model: Understanding Normalization in Azure Sentinel - Azure Sentinel Webinar

July 28, 2021, 11:00 AM ET / 8:00 AM PT (webinar recording date)
Presenter: Ofer Shezaf
Working with multiple data types and sources is a challenge: Understanding different schemas and creating a unique set of analytics rules, workbooks, and hunting queries for each. This webinar will enable you to learn about the Azure Sentinel Information Model (ASIM), which combines schema definitions, parsers, and normalized content to allow source agnostic content and simplify analyst use of the Azure Sentinel’s data.
To ensure you hear about future Microsoft Sentinel webinars and other developments, make sure you join our community by going to aka.ms/SecurityCommunity
Deck shared during the webinar can be accessed on aka.ms/SecurityWebinars
below the recordings section. #MicrosoftSentinel