Microsoft Sentinel - Analytic Rules and Incidents

Follow a company from a query nobody reran to an incident that arrives ready to work. In about five minutes, see how to choose a rule type, build a scheduled rule with entity mapping, group alerts into incidents in the Microsoft Defender portal, and let automation rules assign and tag the work.