Microsoft Sentinel for Internet of Medical Things (IoMT) provides advanced threat detection, investigation, and automated response for connected medical devices, guaranteeing real-time protection in healthcare environments. The book guides you to deploy, and optimize Microsoft Sentinel specifically for IoMT environments, guaranteeing the protection of critical medical systems and patient data.

The book starts with introducing the fundamental concepts of Sentinel, its role in securing IoMT, and the latest advancements in healthcare cybersecurity. Architecting and Deploying Microsoft Sentinel focuses on designing a Sentinel workspace tailored for IoMT, integrating medical device logs, and applying Zero Trust principles to secure connected healthcare environments. Engineering Microsoft Sentinel for Security Operations explores how security engineers can configure analytics, automate threat response, and optimize Security Operations Center (SOC) workflows to mitigate IoMT-specific threats, such as ransomware attacks on medical devices or unauthorized access to patient records. Finally, Threat Detection, Investigation, and Response provides practical techniques for security analysts, including crafting detection rules for IoMT anomalies, investigating incidents involving medical devices, and leveraging Kusto Query Language (KQL) to proactively hunt for threats in healthcare networks.

By the end of this book, you will be equipped to design, implement, and operate a comprehensive security framework for IoMT environments using Microsoft Sentinel.

What You Will Learn:

• Design and deploy a Microsoft Sentinel workspace tailored specifically for IoMT, including integrating medical device logs.
• Implementing Zero Trust security principles to safeguard connected healthcare systems.
• Gain practical skills in creating custom detection rules for IoMT devices, investigating security incidents involving medical systems
• Understanding compliance with key healthcare regulations (such as HIPAA, GDPR, and FDA) Who This Book Is For:

Azure Administrators, Network & security administrator.

Autorentext

Puthiyavan Udayakumar is a cloud infrastructure architect/senior infrastructure consultant with more than 14 years of experience in the information technology industry. He is a Microsoft Certified Azure Solutions Architect Expert, VMware Certified Professional, and VMware vExpert. He has worked as an infrastructure solution architect/senior engineer in designing, deploying, and rolling out complex virtual and cloud infrastructure. He has extensive hands-on experience with products such as Citrix/VMware/Microsoft Virtualization and Cloud technologies. He has a strong knowledge of cloud solution design and deployment, management of cloud services, cloud migration, and multi-cloud infrastructure management services.

Dr. R. Anandan completed his undergraduate degree, doctorate in Computer Science and Engineering, and post-doctoral degree (D.Sc.) in Computer Science and Engineering in Mexico. He is an IBMS/390 Mainframe professional and a Chartered Engineer from the Institution of Engineers in India and received a fellowship from Bose Science Society, India. He completed seven certification courses (mainly from CISCO). He has published more than 140 research papers in various international journals such as Scopus and SCI. He has presented 90 papers at various international conferences. He received 18 awards from national and international agencies. He has authored and edited 27 books. He is also an editor for companies such as Springer, Wiley, World Scientific Press, and Nova Publishers.

Inhalt

Chapter 1: Get Started with Microsoft Sentinel and IoMT.- Chapter 2: Architecting and Deploying Microsoft Sentinel.- Chapter 3: Engineering Microsoft Sentinel for Security Operations.-
Chapter 4: Threat Detection, Investigation, and Response.