You have an Azure subscription that contains a Log Analytics workspace.
You need to onboard Microsoft Sentinel.
What should you do first?

Question

You have an Azure subscription that contains a Log Analytics workspace.You need to onboard Microsoft Sentinel.What should you do first?

R. M. · Accepted Answer

Connect to your security sources.

R. M. · Answer

Create a hunting query.

R. M. · Answer

Correlate alerts into incidents.

R. M. · Answer

Create a custom detection rule.

List of questions