#analytics-rules

3 posts, newest first.

Screenshot of list of analytics rules with recommendation indicator.

Choose a detection exclusion or a rule change SIEM & XDR · 5 min read · 16 Feb 2026 #microsoft-sentinel#analytics-rules#detection-tuning#false-positives#kql Investigate a rule that creates too many incidents SIEM & XDR · 7 min read · 9 Sept 2025 #microsoft-sentinel#troubleshooting#analytics-rules#tuning

Screenshot of analytics rule templates in Microsoft Azure portal.

Turn a detection requirement into an analytics rule SIEM & XDR · 5 min read · 18 Jun 2024 #microsoft-sentinel#analytics-rules#threat-detection#threat-intelligence#kql