You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/detect-threats-built-in.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,15 +10,15 @@ ms.date: 06/07/2023
10
10
11
11
# Detect threats out-of-the-box
12
12
13
-
After you've [installed solutions from the content hub](sentinel-solutions-deploy.md) in Microsoft Sentinel and [set up Microsoft Sentinel to collect data from all over your organization](connect-data-sources.md), you'll need to dig through all that data to detect security threats to your environment. But don't worry—Microsoft Sentinel provides templates to help you create threat detection rules to do all that work for you. These rules are known as **analytics rules**.
13
+
After you've [set up Microsoft Sentinel to collect data from all over your organization](connect-data-sources.md), you'll need to dig through all that data to detect security threats to your environment. But don't worry—Microsoft Sentinel provides templates to help you create threat detection rules to do all that work for you. These rules are known as **analytics rules**.
14
14
15
15
Microsoft's team of security experts and analysts designed these analytics rule templates based on known threats, common attack vectors, and suspicious activity escalation chains. Rules created from these templates automatically search across your environment for any activity that looks suspicious. Many of the templates can be customized to search for activities, or filter them out, according to your needs. The alerts generated by these rules create incidents that you can assign and investigate in your environment.
16
16
17
17
This article helps you understand how to detect threats with Microsoft Sentinel.
18
18
19
19
## View detections
20
20
21
-
To view the installed analytics rules and detections in Microsoft Sentinel, go to **Analytics** > **Rule templates**. This tab contains all the installed rule templates, according to the types displayed in the following table. To find more rule templates, go to the **Content hub** in Microsoft Sentinel to install product solutions or standalone content.
21
+
To view the installed analytics rules and detections in Microsoft Sentinel, go to **Analytics** > **Rule templates**. This tab contains all the installed rule templates, according to the types displayed in the following table. To find more rule templates, go to the **Content hub** in Microsoft Sentinel to install the related product solutions or standalone content.
22
22
23
23
:::image type="content" source="media/tutorial-detect-built-in/view-oob-detections.png" alt-text="Screenshot shows built-in detection rules to find threats with Microsoft Sentinel.":::
24
24
@@ -78,3 +78,5 @@ You can easily [export your rule to an Azure Resource Manager (ARM) template](im
78
78
- To create custom rules, use existing rules as templates or references. Using existing rules as a baseline helps by building out most of the logic before you make any changes needed. For more information, see [Create custom analytics rules to detect threats](detect-threats-custom.md).
79
79
80
80
- To learn how to automate your responses to threats, [Set up automated threat responses in Microsoft Sentinel](tutorial-respond-threats-playbook.md).
81
+
82
+
- To learn how to find more rule templates, see [Discover and manage Microsoft Sentinel out-of-the-box content (Public preview)](sentinel-solutions-deploy.md).
Copy file name to clipboardExpand all lines: articles/sentinel/get-visibility.md
+1-3Lines changed: 1 addition & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -135,7 +135,5 @@ To view the installed out-of-the-box detections, go to **Analytics** and then **
135
135
For more information about getting out-of-the-box detections, see [Get built-in-analytics](detect-threats-built-in.md).
136
136
137
137
## Next steps
138
-
In this quickstart, you learned how to get started using Microsoft Sentinel. Continue to the article for [how to detect threats](detect-threats-built-in.md).
139
138
140
-
> [!div class="nextstepaction"]
141
-
> [Create custom threat detection rules](detect-threats-custom.md) to automate your responses to threats.
139
+
[Detect threats out-of-the-box](detect-threats-built-in.md) and [create custom threat detection rules](detect-threats-custom.md) to automate your responses to threats.
0 commit comments