Question

You have an Azure Sentinel deployment. You need to query for all suspicious credential access activities. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. From Azure Sentinel, select Hunting. Select Run All Queries. Select New Query. Filter by tactics. From Azure Sentinel, select Notebooks.

Answer 1

You have to make sure to check the performance sequence in the order list.

Step-by-step explanation:

Nothing