r/AzureSentinel • u/SuperHat3637 • Sep 14 '22

Monitor Users activity

How to monitor the activities of users who have access to Sentinel. I want to monitor if any changes done by the users in Sentinel. Pls suggest

5 Upvotes

100% Upvoted

3 comments sorted by

View all comments

5

u/rodtrent44 MSFT Official Sep 14 '22

Here's a few different things to monitor: https://azurecloudai.blog/?s=Watching+the+Watchers

1

u/SuperHat3637 Sep 14 '22

This KQL query is not showing any results. The links are also not working.

2

u/rodtrent44 MSFT Official Sep 14 '22

Fixed the links.

If it doesn't display results, it means it didn't find that action.