How to: Automate On-Premises AD Users to Microsoft Sentinel Watchlist

Watchlists in Microsoft Sentinel allow you to correlate data from a data source you provide with the events in your Microsoft Sentinel environment. For example, you might create a watchlist with a list of high-value assets, terminated employees, or service accounts in your environment. Microsoft Sentinel customers often ask if there is a chance to … Continue reading How to: Automate On-Premises AD Users to Microsoft Sentinel Watchlist