DevOps & Infrastructure
Building Cloud SIEM With Sentinel
Deploy Microsoft Sentinel as a cloud-native SIEM/SOAR by configuring multi-cloud data connectors (AWS, Azure, GCP), writing KQL detection and hunting queries, and building automated Logic Apps response playbooks. Use when establishing a centralized SOC for multi-cloud environments, migrating from a legacy SIEM, or performing petabyte-scale threat hunting; not for AWS-only setups where Security Hub/GuardDuty suffice or for endpoint EDR needs.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 4
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-10-27
- Content fingerprint
28ecd809a89c4475943e0544963be48d892bd4814928d1f0d8871558b1fe0f9b