Sentinel

3 examples and best practices for Azure Sentinel, including Azure Sentinel Alert Rule Fusion and Azure Sentinel Alert Rule Machine Learning Behavior Analytics.

Review your .tf file for Azure best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

Start Review (free) >

Alert Rule Fusion

azurerm_sentinel_alert_rule_fusion (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Alert Rule Machine Learning Behavior Analytics

azurerm_sentinel_alert_rule_machine_learning_behavior_analytics (0 example case)

Alert Rule Ms Security Incident

azurerm_sentinel_alert_rule_ms_security_incident (1 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Alert Rule Scheduled

azurerm_sentinel_alert_rule_scheduled (1 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Automation Rule

azurerm_sentinel_automation_rule (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector AWS Cloud Trail

azurerm_sentinel_data_connector_aws_cloud_trail (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Azure Active Directory

azurerm_sentinel_data_connector_azure_active_directory (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Azure Advanced Threat Protection

azurerm_sentinel_data_connector_azure_advanced_threat_protection (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Azure Security Center

azurerm_sentinel_data_connector_azure_security_center (1 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Microsoft Cloud App Security

azurerm_sentinel_data_connector_microsoft_cloud_app_security (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Microsoft Defender Advanced Threat Protection

azurerm_sentinel_data_connector_microsoft_defender_advanced_threat_protection (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Office 365

azurerm_sentinel_data_connector_office_365 (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Data Connector Threat Intelligence

azurerm_sentinel_data_connector_threat_intelligence (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)

Watchlist

azurerm_sentinel_watchlist (0 example case)

Microsoft.OperationalInsights/workspaces (10 example cases)