mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 12:53:38 +00:00
AH-cust-det
This commit is contained in:
@ -116,3 +116,5 @@ You can also take the following actions on the rule from this page:
|
|||||||
|
|
||||||
## Related topic
|
## Related topic
|
||||||
- [Custom detections overview](overview-custom-detections.md)
|
- [Custom detections overview](overview-custom-detections.md)
|
||||||
|
- [Advanced hunting overview](overview-hunting.md)
|
||||||
|
- [Learn the Advanced hunting query language](advanced-hunting.md)
|
||||||
|
@ -28,7 +28,7 @@ With custom detections, you can proactively monitor for and respond to various e
|
|||||||
Custom detections work with [Advanced hunting](overview-hunting.md), which provides a powerful, flexible query language that covers a broad set of event and system information from your network. The queries run every 24 hours, generating alerts and taking response actions whenever there are matches.
|
Custom detections work with [Advanced hunting](overview-hunting.md), which provides a powerful, flexible query language that covers a broad set of event and system information from your network. The queries run every 24 hours, generating alerts and taking response actions whenever there are matches.
|
||||||
|
|
||||||
Custom detections provide:
|
Custom detections provide:
|
||||||
- Alerts from rule-based detections built from Advanced hunting queries
|
- Alerts for rule-based detections built from Advanced hunting queries
|
||||||
- Automatic response actions that apply to files and machines
|
- Automatic response actions that apply to files and machines
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
@ -36,3 +36,4 @@ Custom detections provide:
|
|||||||
|
|
||||||
## Related topic
|
## Related topic
|
||||||
- [Create and manage custom detection rules](custom-detection-rules.md)
|
- [Create and manage custom detection rules](custom-detection-rules.md)
|
||||||
|
- [Advanced hunting overview](overview-hunting.md)
|
Reference in New Issue
Block a user