Note: Please refer to the following before installing the solution:

• Review the solution Release Notes

• There may be known issues pertaining to this Solution, please refer to them before installing.

The Sentinel UEBA content package will provide you with various queries based on UEBA tables, that allows you to hunt for tailored threat scenarios. You’ll be able to investigate and search for anomalous activities over UEBA’s enriched data, and get inspired to customize queries according to your own use-cases.

Important : Some of the queries that are part of this solution, make use of Built-in Watchlist Templates and will not work unless the corresponding watchlist is created. Other queries may requires changes to match your environment details.

Hunting Queries: 23

Learn more about Microsoft Sentinel | Learn more about Solutions