Forum Discussion

Ashwin_Patil's avatar
Ashwin_Patil
Icon for Microsoft rankMicrosoft
Jun 10, 2019

Time Series analysis and visualization in Azure Sentinel

I have posted couple of blogs around Time Series analysis and visualization on security event log data sources in Azure Sentinel

 

Blog 1: Introduction to Time Series, Step by step guide on compiling queries, configure alerts and investigate the results.

Data Source : Windows Event Log - Process Execution Data

https://techcommunity.microsoft.com/t5/Azure-Sentinel/Looking-for-unknown-anomalies-what-is-normal-Time-Series/ba-p/555052

 

Blog 2:  Visualization and interpreting Time Series Data.

Data Source- Palo Alto Network Traffic Logs

https://techcommunity.microsoft.com/t5/Azure-Sentinel/Time-Series-visualization-of-Palo-Alto-logs-to-detect-data/ba-p/666344

 

As always, Feedbacks or questions are welcome.

Resources