Custom Security Dashboards in ADX

Akshata Revankar

Interested in learning more about ADX and what it can do? Or, are you looking for a way to build a report to watch security data? Then you will find this session helpful.

The session will focus on leveraging Azure Data Explorer (ADX) to build custom security dashboards. The ADX platform can help with visualizing and monitoring security metrics from multiple sources. We’ll look into topics like tracking trends, key indicators, and sharing insights, thereby enhancing the overall security posture.

We will begin with a quick overview of Data Ingestion, focusing on how various types of security logs can be ingested into ADX. Following this, we’ll delve into Schema Design, discussing how to organize data with key fields to include.

Next, we’ll explore another aspect, Create Queries, which involves leveraging KQL queries to retrieve data. We’ll then move on to Visualizations, where we’ll learn how to create charts and graphs to visually present the data.

Finally, we’ll wrap up with a look at Real-Time Updates, examining how data can be updated in real time. This comprehensive approach ensures a thorough understanding of the entire process.

By the end of the session, attendees will have a good understanding of building and utilizing custom security dashboards in ADX for effective security monitoring and real-time data analysis.

Light on slides, heavy on demo.