From the course: Identity Threat Protection with Sentinel

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Challenge: Threat detection rule scenarios

Challenge: Threat detection rule scenarios

From the course: Identity Threat Protection with Sentinel

Start my 1-month free trial Buy for my team

Challenge: Threat detection rule scenarios

“

(cheerful upbeat music) - [Instructor] Now that we've covered threat detection rules in Sentinel, can you identify which detection rule would be applicable in this scenario? An employee's account attempts to access confidential files at 2 a.m., which is unusual for the typical activity pattern. Identify which analytic rule could detect this and describe how you would configure its trigger, logic, and action. And if you need some assistance with how to modify and create custom analytic rules from scratch, I have linked the content resource in the course materials to help you along. And if you're stuck, check out the next video with the solution to this challenge.

Contents