Detection capability of Azure Sentinel

[zubairrahimsoc]

There are some built-in Analytics rules based on data sources beside that how you increase the detection capability of Azure Sentinel? What I want to know that do you looking the latest IOCs and create a custom rules , did you map the azure sentinel with MITRE and what are some good platform where i find threat detection queries/rules for Azure Sentinel.

Thanks

[#2]

Adding custom analytics rules is almost a requirement while you work with Sentinel. Although it comes with some out of the box stuff, you may have your own preferences when it comes to rules to use while detection threats. A good source for community provided KQL and other Sentinel resources would be https://github.com/Azure/Azure-Sentinel.