New Blog Post | What’s new: IP entity page

What’s new: IP entity page - Microsoft Tech Community

Now in preview, the IP entity page is the latest addition to Azure Sentinel's User and Entity Behavior Analytics capabilities.  Like the host and account pages, the IP page helps analysts quickly triage and investigate security incidents. The IP page aggregates information from multiple Microsoft and 3rd party data sources. This page provides contextual information and insights like geolocation information, threat indicator data, network session data and IP-to-host mappings.

 

Original Post: New Blog Post | What’s new: IP entity page - Microsoft Tech Community