Forum Discussion

Luizao_f's avatar
Luizao_f
Brass Contributor
Aug 04, 2021

Best practices for managing use-case exceptions for an MSSP Sentinel environment

Good night people.

I work on managing Azure Sentinel for customers in an MSSP environment and have been encountering a dilemma in managing exceptions for use cases.

 

It's been my pain. 😞

 

How do you create use case exceptions in a scalable way that doesn't need to go into each case's KQL code to insert an exception if you do?

No RepliesBe the first to reply

Resources