MEAPSA

Monitor and maintain Microsoft Entra ID

Audit and diagnostic logs within Microsoft Entra ID provide a rich view into how users are accessing your Azure solution. Learn to monitor, troubleshoot, and analyze sign-in data.

Administrator

Identity And Access Administrator

Security Engineer

Azure

Entra

Entra Id

Entra Identity Governance

Module Objectives

By the end of this module, you'll be able to:

Analyze and investigate sign in logs to troubleshoot access issues
Review and monitor Microsoft Entra audit logs
Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
Export sign in and audit logs to a third-party SIEM (security information and event management)
Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
Analyze Microsoft Entra workbooks / reporting
Configure notifications

Units

Introduction min
Analyze and investigate sign-in logs to troubleshoot access issues min
Review and monitor Microsoft Entra audit logs min
Exercise connect data from Microsoft Entra ID to Microsoft Sentinel min
Export logs to third-party security information and event management system min
Analyze Microsoft Entra workbooks and reporting min
Monitor security posture with Identity Secure Score min
Knowledge check min
Summary and resources min

Prerequisites

None