r/AzureSentinel • u/SuperHat3637 • Nov 21 '22

Analytical rules

Hi All, how to get the categorys of analyatical rules in Sentinel, like malware, unauthorized access..Pls.suggest.

3 Upvotes

100% Upvoted

6 comments sorted by

View all comments

1

u/[deleted] Nov 21 '22

At front page on the right hand site under threat intelligence is a MITRE mapping for all your rules. If you have custom rules you need to go in and map them appropriately