Microsoft Sentinel: connect vs detect vs visualise vs respond vs hunt
This sheet compares Data connectors, Analytics rules, Workbooks, Playbooks, Hunting.
| Criterion | Data connectors | Analytics rules | Workbooks | Playbooks | Hunting |
|---|---|---|---|---|---|
| Job | Real-time integration of source data | Group alerts into higher-fidelity incidents | Interactive visual reports over collected data | Automated response actions on incidents | Proactive search before an alert is triggered |
The verdict, the full comparison, 6 rules and 2 traps are part of SC-900 access. Unlock SC-900.