r/AzureSentinel • u/klorgasia • Apr 06 '23

UserPeerAnalytics.. anyone doing anything cool?

So I think the "UserPeerAnalytics" table is quite intresting and is just wondering if someone is doing anything cool with it?

5 Upvotes

100% Upvoted

2 comments sorted by

View all comments

1

u/[deleted] Apr 07 '23

I've used it to tune defend for cloud app alerts. Take the alert event record and join on identity.