Forum Discussion
Implementing ASIM solutions
Does anyone have any suggestions about how to efficiently evaluate many workspaces for opportunities to implement ASIM based solutions? e.g., is there a way to determine which workspaces have duplicative hunting queries?
Also, are there any recommendations about how to test the ASIM solutions?
- I use the "Hunting" blade of Sentinel Central for ASIM testing (or any testing). You might have to adapt each ASIm query a little, but it allows you to run against many workspaces with only minor editing.
https://www.linkedin.com/pulse/microsoft-sentinel-central-workbook-v20-clive-watson/?trackingId=hQdt9pNgrQWdDbERwcbIJA%3D%3D
