Ninja Cat Giveaway: Episode 3 | Sentinel integration

HeikeRitter 

Favourite Features:

1. Ability to integrate 3rd party applications using connectors.
2. Fusion Rules (which combines signals from different services to generate an alert).
3. MITRE ATT&CK (Preview) heat maps.
4. Playbook templates under Automation. Block AAD user is great to prevent account compromise.

UEBA stands for User and Entity Behaviour Analytics.
Basis the data collected by Sentinel (logs/alerts), Sentinel creates a baseline profile for entities.
These baselines profiles can then be utilised by Sentinel to detect anomalies (like login from a new/suspicious location).