May 20, 2022

Integrating on-prem security information to Microsoft Sentinel

Cameron Fuller / Nathan Gau / Rod Trent

Nathan Gau, Senior Technical Specialist at Microsoft, discusses integrating security data into Sentinel using a SCOM management pack. He covers use case scenarios and benefits, and some of the technical issues that may need to be addressed in advance.

Meet the author

Author

Cameron Fuller

Solution Director at Quisitive

Cameron, former Microsoft MVP and Solution Director for Quisitive. He has 30 years of infrastructure experience, focused on monitoring and automation solutions. Cameron co-authored a number of System Center books and maintains a highly technical blog. Additionally, you can find Cameron as a speaker at conferences like the Midwest Management Summit.

Nathan Gau

Senior Technical Specialist @ Microsoft

Nathan has been working in IT for over 25 years across various industries. He is currently a Senior Technical Specialist at Microsoft, doing cyber security work for public sector customers. In the SCOM world, he is best known for his white papers on alert management and has authored two Security solutions for SCOM. The first turned SCOM into a log monitoring and operational best practices security solution. The second built on that and turned SCOM into an edge device for Microsoft Sentinel.

Rod Trent

Senior Cloud Security Advocate @ Microsoft

Rod Trent is a Senior Cloud Security Advocate for Microsoft and an Azure Sentinel global SME, helping customers migrate from existing SIEMs to Azure Sentinel to achieve the promise of better security through improved efficiency without compromise. He is a husband, dad, and first-time grandfather. He spends his spare time (if such a thing does truly exist) simultaneously watching episodes of the TV show, Six Million Dollar Man, and writing KQL queries.