Pre-deployment activities
As with almost any technical implementation, there will be a few pre-deployment activities you will like to consider and plan for. This section is meant to get these ironed out and assist you in acquiring any internal assistance you might need. Generally speaking, the pre-deployment activities for Microsoft Sentinel are straightforward. Let's take a look:
- One of the first items you will need to tackle before deploying Microsoft Sentinel will be to determine which data sources you need to monitor from a security standpoint. This will help you get a rough understanding of the overall data size requirements. If you happen to work for an organization that has an existing SIEM, ask the team for the daily average ingestion that they see and divide that out by topic type or source! This will be a great conversational starting point.
As you may have assumed, this conversation is truly budget-driven. You will be able to review Microsoft's...
