Blog Post

Microsoft Sentinel Blog

4 MIN READ

Detect more, spend less: the future of threat intelligence correlation

neelam_n

Microsoft

Nov 12, 2025

Co-author: Yoni Nave

With more data and intelligence than ever, it’s often a challenge to manage it all while making sure you’re maximizing its value for security investigations. We’ve made it easier for customers levera...

Updated Nov 11, 2025

Version 1.0

microsoft sentinel

neelam_n

Microsoft

Joined July 27, 2019

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

MichaelMcRae

Copper Contributor

Nov 13, 2025

We have a GCC environment (normal not high or DoD) and the option to create a custom detection rule is greyed out for these queries, even when all the correct columns are projected. I have found this to be the case when joining the ThreatIntelIndicators table with other Defender tables.