Forum Discussion
Francesco47
Mar 06, 2020Copper Contributor
Azure Sentinel Hunting Livestream
Hello Community, we are working on a custom Hunting Query based on a failed login by expired account in Azure Sentinel. The Query runs properly but when we try to add it to livestream, we noticed th...
Rod_Trent
Microsoft
Mar 06, 2020Francesco47 Could you post the query so we can take a look at it to make sure there's no thresholds built into it?
Additionally, the Live Stream session will continue unless you sign out of the Azure portal. So, an active Azure portal session is also required.