brencronin
Apr 2422 min read
Microsoft SC200 - Sentinel SIEM/SOAR Part 2 - Analytics & Automations
Sentinel Detections and Automations In the previous section, we explored Workspace Manager, Data Connectors, and Settings. This section dives deeper into Sentinel's detection and response capabilities, focusing on: Analytics Watchlists Automation Configuration and settings for these features can also be found under the sentinel Configuration section. Sentinel Analytics (Detection Rules) Analytics rules are the core of Sentinel’s threat detection engine. These rules run querie
Â
Â
Â











