Lets you browse and install Microsoft Sentinel solutions, or standalone items such as playbooks, workbooks, hunting queries, analytics rules and data connectors, all supplied out of the box.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Content hub in context, with comparison tables and the common traps.
Terms in this definition
- BROWSE
Granted on a catalog, this Unity Catalog privilege lets people discover objects, read their metadata and request access, all without
USE CATALOGand with no access to the data itself. - Microsoft Sentinel
Microsoft's cloud-native SIEM, with SOAR capabilities, which stores and queries its data in a Log Analytics workspace.
- Azure Monitor workbooks
Reports in Azure that you can interact with, mixing KQL queries, metrics, parameters and text. Send Intune logs to Log Analytics and you can build them on that data.
- Hunting queries
Proactive threat searches written in KQL and saved in Microsoft Sentinel's Hunting area, run against the workspace.
- ALL
A DAX function that ignores any filters and gives back every row of a table or every value of the named columns. Used within CALCULATE, it works as a modifier that clears filters, although REMOVEFILTERS states that intent more clearly where it is available.
Related terms
- Microsoft Sentinel Contributor
Built-in Azure role that includes everything Responder can do and can also create and modify workbooks, analytics rules and content hub solutions.
- Microsoft Sentinel solution
Bundle of Sentinel content for a product or scenario, such as playbooks, workbooks, connectors and analytics rules. Unlike standalone content, it installs from the content hub as one unit and you update it by hand.