Azure Sentinel by Patrik

Analytic Rules

Types of Analytic Rules

  • Scheduled rules run on a set schedule to detect suspicious events
  • Microsoft Security rules are used to create Azure Sentinel incidents from alerts generated from other Microsoft Security solutions
  • Machine learning behavioral analytics rules can only be created from templates provided and use proprietary Microsoft machine learning algorithms
  • Fusion is a Microsoft machine learning technology to combine information from various sources to generate alerts

Comments

Leave a Comment

All fields are required. Your email address will not be published.