mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 04:43:37 +00:00
AH-cust-det
This commit is contained in:
@ -116,3 +116,5 @@ You can also take the following actions on the rule from this page:
|
||||
|
||||
## Related topic
|
||||
- [Custom detections overview](overview-custom-detections.md)
|
||||
- [Advanced hunting overview](overview-hunting.md)
|
||||
- [Learn the Advanced hunting query language](advanced-hunting.md)
|
||||
|
@ -28,11 +28,12 @@ With custom detections, you can proactively monitor for and respond to various e
|
||||
Custom detections work with [Advanced hunting](overview-hunting.md), which provides a powerful, flexible query language that covers a broad set of event and system information from your network. The queries run every 24 hours, generating alerts and taking response actions whenever there are matches.
|
||||
|
||||
Custom detections provide:
|
||||
- Alerts from rule-based detections built from Advanced hunting queries
|
||||
- Alerts for rule-based detections built from Advanced hunting queries
|
||||
- Automatic response actions that apply to files and machines
|
||||
|
||||
>[!NOTE]
|
||||
>To create and manage custom detections, [your role](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) needs to have the **manage security settings** permission.
|
||||
|
||||
## Related topic
|
||||
- [Create and manage custom detection rules](custom-detection-rules.md)
|
||||
- [Create and manage custom detection rules](custom-detection-rules.md)
|
||||
- [Advanced hunting overview](overview-hunting.md)
|
Reference in New Issue
Block a user