In this module, you learned how Microsoft Sentinel Analytics can help the SecOps team identify and stop cyber attacks.

Learning objectives

In this module, you will:

Explain the importance of Microsoft Sentinel Analytics.

Explain different types of analytics rules.

Create rules from templates.

Create new analytics rules and queries using the analytics rule wizard.

Manage rules with modifications.

This module is part of these learning paths

• Cloud-native security operations with Microsoft Sentinel
• Configure SIEM security operations using Microsoft Sentinel
• SC-200: Create detections and perform investigations using Microsoft Sentinel

• Introduction
• Exercise – Detect threats with Microsoft Sentinel analytics
• What is Microsoft Sentinel Analytics?
• Types of analytics rules
• Create an analytics rule from templates
• Create an analytics rule from wizard
• Manage analytics rules
• Exercise – Detect threats with Microsoft Sentinel analytics
• Summary