We have only started using Sentinel in the last month and there is so much to learn. It was a great disappointment to find that MS have pushed us to use AMA but has not maintained the out-of-the-box workbooks like Insecure Protocols to also work with AMA SecurityEvent data.
But how do I get this *.workbook file added to my MS Sentinel workbook list?
And how much work would it be to have it as a template so we see it under templates and can then also save it as any new log analytics workspaces?
Hey this is really great stuff.
We have only started using Sentinel in the last month and there is so much to learn. It was a great disappointment to find that MS have pushed us to use AMA but has not maintained the out-of-the-box workbooks like Insecure Protocols to also work with AMA SecurityEvent data.
But how do I get this *.workbook file added to my MS Sentinel workbook list? And how much work would it be to have it as a template so we see it under templates and can then also save it as any new log analytics workspaces?