Question: You have a Microsoft 3 6 5 E 5 subscription and a Microsoft Sentinel workspace. You create a custom query named Query 1 . You
You have a Microsoft E subscription and a Microsoft Sentinel workspace.
You create a custom query named Query
You need to test Query against events as they occur in the subscription.
What should you use?
Select only one answer.
a bookmark
a livestream
a parser
a watchlist
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
