Implementing Lookups in Azure Sentinel
(Updated April 2020 to include lookups using workspace tables)
In this blog post “Active Lists out; make_list() in”, referred to one of the uses of Active Lists (ArcSight) or reference sets (QRadar), namely implementing correlation. But Ac… Continue reading Implementing Lookups in Azure Sentinel
