Microsoft Sentinel Ask Microsoft Anything (AMA)

In terms of AI and ML, Microsoft Sentinel provides the Fusion rules which use ML to help determine if some lower severity incidents are actually leading up to a larger issue. There is also the ML Behavior Analytics rules that help to determine if logins to systems are atypical, In addition, you can develop and use your own ML models (BYOML) https://learn.microsoft.com/en-us/azure/sentinel/bring-your-own-ml We will also be working to bring in OpenAI and other AI based tools: https://techcommunity.microsoft.com/t5/manufacturing/introduction-to-openai-and-microsoft-sentinel/ba-p/3761907