TMTH04 Using Microsoft Teams as Your SOC War Room


9:30am - 10:45am

Level: Advanced

Rod Trent

Senior Cloud Security Advocate and Global Microsoft Sentinel SME,


Microsoft Azure Sentinel provides direct integration with Microsoft Teams, allowing analysts and non-analysts the ability to work together during an active threat. In this session, learn how it works and then how to develop processes around it.

You will learn:

  • Use Microsoft Teams as a central repository for threat collateral
  • Enable Teams channel for access by in-time individuals
  • Assign proper duties to the correct skillsets