Focus area
Detection
Deep dives covering Detection.
Guides, runbooks, and opinions focused on Detection.
Featured runbook
Sentinel analytics rules to enable first
How to pick Sentinel analytics rules to enable first: content hub templates, data source checks, false-positive tuning and the Defender portal.
Read now
Need context?
Jump into the guided path, or browse everything if you’re after something specific.
Explore other focus areas
Hop between landing zones, identity, networking, and more.