Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learn

Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. In-depth articles on Microsoft developer tools and technologies Personalized learning paths and courses Globally recognized, industry-endorsed credentials Technical questions and answers moderated by Microsoft Code sample library for Microsoft developer tools and technologies Interactive, curated guidance and recommendations Thousands of hours of original programming from Microsoft experts Featured assessment Wherever you are in your AI journey, Microsoft Learn meets you where you are and helps you deepen your skills. Featured assessment Wherever you are in your AI journey, Microsoft Learn meets you where you are and helps you deepen your skills. Featured assessment Wherever you are in your AI journey, Microsoft Learn meets you where you are and helps you deepen your skills. Featured assessment Wherever you are in your AI journey, Microsoft Learn meets you where you are and help

Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learn Table of contents Exit editor mode Ask Learn Ask Learn Reading mode Table of contents Read in English Add Add to plan Edit Copy Markdown Print Note Access to this page requires authorization. You can try signing in or changing directories . Access to this page requires authorization. You can try changing directories . Anomalies detected by the Microsoft Sentinel machine learning engine Feedback Summarize this article for me Microsoft Sentinel detects anomalies by analyzing the behavior of users in an environ

saved by

• Cooper Edmunds

related reading

• Advanced threat detection with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• Use customizable anomalies to detect threats in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• A guide to threat hunting and monitoring in Snowflake | Datadog Security Labssecuritylabs.datadoghq.com
• Create custom detection rules in Microsoft Defender XDR - Microsoft Defender XDR | Microsoft Learnlearn.microsoft.com
• Security incident disclosure — July 2026huggingface.co
• Threat actors misuse OAuth applications to automate financially driven attacksmicrosoft.com
• Cloud coverage: Detecting an email payroll diversion attackredcanary.com
• Behavior Analytics in Your Security Data Lake Just Got Way Easieromeronsecurity.com
• PerfectData Software Abuse and Account Takeover Risksdarktrace.com
• Overview of Event Threat Detectioncloud.google.com
• Work with anomaly detection analytics rules in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• Exposing and shutting down an inbox heist in actionredcanary.com