A group of related alerts brought together so that analysts can see a whole attack, and everything it touched, in one place.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Security incident in context, with comparison tables and the common traps.
Terms in this definition
- RELATED
Fetches a column value from the lookup table, that is the one side of a many-to-one relationship, for whichever row is being evaluated. It therefore needs to run inside an iterator or a calculated column, where row context exists.