A Deeper look into Sentinel Analytic Rules and Behavior Analysis
I recently discussed Importance of Entity Behavioral modeling in Sentinel.
However, it’s necessary a deeper look into this capability to properly understand it.
You see, this Analytical, machine-learning powered, feature can assist Sentinel admins and the larger SOC in multiple ways.
Let’s then peel the onion from different angles.