Security big data analytics with Azure Synapse and Microsoft Sentinel Notebooks!

SocInABox There are already several areas in Sentinel where ML integration takes place. UEBA, Entity pages, and Fusion are a few built-in ML areas where you can just feed it with your own data and get the insights generated from the ML algorithms. SOC-ML is semi-customizable ML analytics that provides anomaly detection.

The integration with Azure Synapse and Sentinel Notebooks I detailed in the blog allows you to build even more custom analytics for use cases that aren't covered by the out-of-the-box analytics and may require data engineering and data science :). I hope that helps!