Blog Post

Microsoft Sentinel Blog
4 MIN READ

Detect more, spend less: the future of threat intelligence correlation

neelam_n's avatar
neelam_n
Icon for Microsoft rankMicrosoft
Nov 12, 2025

Co-author: Yoni Nave

With more data and intelligence than ever, it’s often a challenge to manage it all while making sure you’re maximizing its value for security investigations. We’ve made it easier for customers levera...
Updated Nov 11, 2025
Version 1.0
microsoft sentinel
neelam_n's avatar
Icon for Microsoft rankMicrosoft
Joined July 27, 2019
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

MichaelMcRae's avatar
MichaelMcRae
Copper Contributor
Nov 13, 2025

We have a GCC environment (normal not high or DoD) and the option to create a custom detection rule is greyed out for these queries, even when all the correct columns are projected.  I have found this to be the case when joining the ThreatIntelIndicators table with other Defender tables.