Blog Post

Microsoft Sentinel Blog
1 MIN READ

What's New: Azure Sentinel Machine Learning Behavior Analytics: Anomalous RDP Login Detection

farazfadavi's avatar
farazfadavi
Copper Contributor
Jul 14, 2020
We are delighted to introduce the Public Preview for the Anomalous RDP Login Detection in Azure Sentinel’s latest machine learning (ML) Behavior Analytics offering. Azure Sentinel can apply machine l...
Updated Nov 03, 2021
Version 5.0
detection
microsoft sentinel
security
farazfadavi's avatar
Copper Contributor
Joined July 08, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

majo01's avatar
majo01
Brass Contributor
Jul 20, 2020

farazfadaviThanks.

We are in a project of onboarding of new Windows servers to a single Sentinel workspace, so more waves of windows servers and users can appear suddenly in Sentinel. Is it okay to start this RDP ML Rule in such "turbulent" environment or we should wait until the full set of event sources stabilizes ?

I am asking this because i know the rule would enter a 30 days learning period.

 

Thanks.