In order to perform some SOAR, I would like to know how I could get the data link from the UEBA.
For instance, how I can get:
Is it possible using one of Microsoft API? A Logic App Connector?
Are you trying to better understand how to configure each feature or how to send the information to SIEM?