6 tools and resources
A cloud-native SIEM platform that provides security analytics, intuitive workflow, and simplified incident response to help security teams defend against cyber threats.
A detection-as-code platform for streamlining cloud security operations and responding to security incidents.
A knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model.
Browse a library of EQL analytics now natively integrated in Elasticsearch.
A service that analyzes and visualizes security data to investigate potential security issues.
Level 400 training to become a Microsoft Sentinel Ninja.
