: This section includes the Analytics menu, where users create and manage Scheduled Query Rules and Near-Real-Time (NRT) detection rules to identify threats within logs.
: The central hub for viewing and investigating security alerts grouped into incidents. MENU SENTINELLE
: Access to the Workbooks menu allows security teams to create custom dashboards for monitoring SOC efficiency. : This section includes the Analytics menu, where
In Microsoft Sentinel, the navigation menu is the primary interface for managing security operations. It is organized into functional sections that allow users to ingest, detect, and respond to threats. or close incidents. Threat Management :
: Found under the Configuration section, this menu is used to build Automation Rules that auto-assign, tag, or close incidents. Threat Management :