Skip to content

Commit 5ba15d8

Browse files
committed
Upds to make it more general about rules
1 parent 0c805dd commit 5ba15d8

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

articles/sentinel/detect-threats-built-in.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@ ms.date: 06/07/2023
1010

1111
# Detect threats out-of-the-box
1212

13-
After you've [installed solutions from the content hub](sentinel-solutions-deploy.md) in Microsoft Sentinel and [set up Microsoft Sentinel to collect data from all over your organization](connect-data-sources.md), you'll need to dig through all that data to detect security threats to your environment. But don't worry—Microsoft Sentinel provides templates to help you create threat detection rules to do all that work for you. These rules are known as **analytics rules**.
13+
After you've [set up Microsoft Sentinel to collect data from all over your organization](connect-data-sources.md), you'll need to dig through all that data to detect security threats to your environment. But don't worry—Microsoft Sentinel provides templates to help you create threat detection rules to do all that work for you. These rules are known as **analytics rules**.
1414

1515
Microsoft's team of security experts and analysts designed these analytics rule templates based on known threats, common attack vectors, and suspicious activity escalation chains. Rules created from these templates automatically search across your environment for any activity that looks suspicious. Many of the templates can be customized to search for activities, or filter them out, according to your needs. The alerts generated by these rules create incidents that you can assign and investigate in your environment.
1616

1717
This article helps you understand how to detect threats with Microsoft Sentinel.
1818

1919
## View detections
2020

21-
To view the installed analytics rules and detections in Microsoft Sentinel, go to **Analytics** > **Rule templates**. This tab contains all the installed rule templates, according to the types displayed in the following table. To find more rule templates, go to the **Content hub** in Microsoft Sentinel to install product solutions or standalone content.
21+
To view the installed analytics rules and detections in Microsoft Sentinel, go to **Analytics** > **Rule templates**. This tab contains all the installed rule templates, according to the types displayed in the following table. To find more rule templates, go to the **Content hub** in Microsoft Sentinel to install the related product solutions or standalone content.
2222

2323
:::image type="content" source="media/tutorial-detect-built-in/view-oob-detections.png" alt-text="Screenshot shows built-in detection rules to find threats with Microsoft Sentinel.":::
2424

@@ -78,3 +78,5 @@ You can easily [export your rule to an Azure Resource Manager (ARM) template](im
7878
- To create custom rules, use existing rules as templates or references. Using existing rules as a baseline helps by building out most of the logic before you make any changes needed. For more information, see [Create custom analytics rules to detect threats](detect-threats-custom.md).
7979

8080
- To learn how to automate your responses to threats, [Set up automated threat responses in Microsoft Sentinel](tutorial-respond-threats-playbook.md).
81+
82+
- To learn how to find more rule templates, see [Discover and manage Microsoft Sentinel out-of-the-box content (Public preview)](sentinel-solutions-deploy.md).

articles/sentinel/get-visibility.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -135,7 +135,5 @@ To view the installed out-of-the-box detections, go to **Analytics** and then **
135135
For more information about getting out-of-the-box detections, see [Get built-in-analytics](detect-threats-built-in.md).
136136

137137
## Next steps
138-
In this quickstart, you learned how to get started using Microsoft Sentinel. Continue to the article for [how to detect threats](detect-threats-built-in.md).
139138

140-
> [!div class="nextstepaction"]
141-
> [Create custom threat detection rules](detect-threats-custom.md) to automate your responses to threats.
139+
[Detect threats out-of-the-box](detect-threats-built-in.md) and [create custom threat detection rules](detect-threats-custom.md) to automate your responses to threats.

0 commit comments

Comments
 (0)