Microsoft says its cloud-native SIEM platform is now able to detect potential ransomware activity using the Fusion machine learning model. Azure Sentinel uses built-in artificial intelligence (AI) technology to quickly analyze vast volumes of data across enterprise environments. It also employs machine learning tech known as Fusion to detect and trigger multi-stage attack alerts by identifying sets of suspicious activities and abnormal behavior spotted at various attack stages. Microsoft: “You can use the alerts listed in the incident to analyze the techniques possibly used by attackers to compromise a host/device”””
Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-adds-fusion-ransomware-attack-detection-to-azure-sentinel/