Forum Discussion
Behavior Analytics, investigation Priority
Hello,
Regarding the field investigation Priority in the Behavior Analytics table, what would be the value that Microsoft considers to be high/critical to look into the user's account?
By analyzing the logs i would say, 7 or higher, if someone could tell me, and thank you in advance.
If InvestigationPriority >= 7, it's recommended to manually review the account activity in Microsoft Defender for Identity (if integrated) or check for other correlated alerts in Sentinel.
If InvestigationPriority >= 8, consider immediate action
