Learn how to use automation tools and techniques to make your security operations awesome right away with Microsoft Sentinel.
Published May 19, 2025
Version 1.0Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.
Nice article, Matt. It would be helpful to elaborate on how automation rules can be scoped or filtered to target specific assets or conditions within the broader application of an analytic rule. Providing a concrete example or a step-by-step guide on setting up such a rule would enhance understanding. Regards, Frank
Thank you for your kind words! There are about five more articles coming in this series and the next one specifically is going to cover Automation Rules :-)