wwlpublish Use watchlists in Microsoft Sentinel - Training
- This module teaches you to
createanduseMicrosoftSentinel watchlists, which are named lists of imported data that can be accessed in KQL queries. You'll learn to createwatchlistsandintegratethem into your KQL queries.
‣
Introduction
‣
Plan for watchlists
‣
Create a watchlist
‣
Manage watchlists
‣
Knowledge check
‣