There’s a new Workbook available in the Microsoft Sentinel console that I’m pretty sure you’ll overlook because it’s been released without much fanfare. However, for those taking advantage of Microsoft Defender for Endpoint and the connection to Microsoft Sentinel, this Workbook contains valuable information.
To locate it, in Workbook – Templates, to a quick filter on ‘Defender.’ Save it to enable it for your environment.
Original Post: New Blog Post | Microsoft Defender for Endpoint Workbook for Microsoft Sentinel - Microsoft Tech Com...