Deployment of Azure Sentinel All In One

✅ Creates resource group (if given resource group doesn't exist yet) ✅ Creates Log Analytics workspace (if given workspace doesn't exist yet) ✅ Installs Azure Sentinel on top of the workspace (if not installed yet) ✅ Enables selected Data Connectors from tihs list: ⭐️ Azure Activity ⭐️ Azure Security Center ⭐️ Azure Active Directory Identity Protection ⭐️ Office 365 (Sharepoint, Exchange and Teams) ⭐️ Microsoft Cloud App Security ⭐️ Azure Advanced Threat Protection ⭐️ Microsoft Defender Advanced Threat Protection ⭐️ Security Events ⭐️ Linux Syslog ⭐️ DNS (Preview) ⭐️ Windows Firewall ✅ Enables analytics rules for selected Microsoft 1st party products ✅ Enables Fusion rule and ML Behavior Analytics rules for RDP or SSH (if Security Events or Syslog data sources are selected) ✅ Enables Scheduled analytics rules that apply to all the enabled connectors