Introduction
This book is something I have been wanting to write forever and I finally just sat down and started to write it. Of course, when I was just getting into it, Microsoft announced that Microsoft Sentinel will only be available in the Defender portal starting in 2026 so I figured I would go ahead and write about how to use Microsoft Sentinel workbooks in the Defender portal!
It took quite a while to go through all the little nooks and crannies that make up workbooks, not to mention trying to figure out what was not working in the Defender portal as opposed to me just not understanding what is going on.
Hopefully I have that all worked out and wrote a book that will be useful. I am sure by the time people start reading it, it will already be out of date. Got to love writing books on SaaS!
In any case, this is also the first book I have uploaded as a Kindle book as well. So now there are two ways to get the book, PDF or Kindle. There is a minimal charge for the Kindle version, only because Amazon requires a minimum price. I am hoping to offer it as part of the Kindle Unlimited program soon.
If, for some reason, you want the print version, let me know and I will see about uploading the book so it can be purchased as a print edition as well.
PDF version: garybushey/UsingMicrosoftSentinelWorkbooks: Using Microsoft Sentinel Workbooks in the Microsoft Defender Portal book
Kindle version (may take a while for it to show up), just search for “Using Microsoft Sentinel workbooks in the Microsoft Defender portal”