Blog Post

Microsoft Sentinel Blog
6 MIN READ

Guided UEBA Investigation Scenarios to empower your SOC

Sean_Wasonga's avatar
Sean_Wasonga
Icon for Microsoft rankMicrosoft
Nov 06, 2020
Related Content: Enable User and Entity Behavior Analytics (UEBA) in Azure Sentinel Introducing User and Entity Behavior Analytics (Public Preview)*UEBA is now Generally Available Co- Author :j...
Updated Nov 03, 2021
Version 5.0
Hunting
investigation
microsoft sentinel
DC's avatar
DC
Icon for Microsoft rankMicrosoft
Dec 02, 2021

which data sources build the blast radius? Is it Azure and Azure AD RBAC only? Plans to look also into on-prem group memberships maybe via MDI by taking into account sensitive groups? Or even further than that?

 

any plans to add ServicePrincipals under UEBA as well?