Hi All,

I have tried the Sentinel Training lab from “content hub” and now I want to create a small demo lab for Sentinel with certain Azure VMs.

One of the use cases is – alerting when a someone has logged in from different geolocations than where the VM is situated. How can I achieve getting logs of someone trying to connect from different geolocations to the same VM. I can create alerts based on that in Sentinel.

Thanks all !

​Hi All,I have tried the Sentinel Training lab from “content hub” and now I want to create a small demo lab for Sentinel with certain Azure VMs.One of the use cases is – alerting when a someone has logged in from different geolocations than where the VM is situated. How can I achieve getting logs of someone trying to connect from different geolocations to the same VM. I can create alerts based on that in Sentinel.Thanks all !  Read More

​