SC-200 decision sheets

• Sentinel analytics rule types: NRT vs Fusion vs TI vs ML Behavior
• Sentinel analytics tier vs data lake tier
• Automatic attack disruption: which product acts, by identity type