wwlpublish Query logs in Microsoft Sentinel - Training
- As a Security Operations Analyst, you need to grasp the
tables
,fields
, andingested
data in yourworkspace
andlearn
to query key data tables in MicrosoftSentinel
. By the end of this module, you'll be able toview
andquery
these tables effectively using the Logs page in Microsoft Sentinel.
‣
Introduction
‣
Query logs in the logs page
‣
Understand Microsoft Sentinel tables
‣
Understand common tables
‣
Understand Microsoft Defender XDR tables
‣
Knowledge check
‣