Blog | G5 Cyber Security

Reducing security alert fatigue using machine learning in Azure Sentinel

Microsoft has launched Azure Sentinel, a cloud native SIEM tool. The focus is to reduce alert fatigue and offer ML toolkits tailored to the security community. Machine learning (ML) in Azure Sentinel is built-in right from the beginning. Fusion technology, currently in public preview, uses state of the art scalable learning algorithms to correlate millions of lower fidelity anomalous activities into tens of high fidelity cases. Fusion combines yellow alerts, which themselves may not be actionable, into high fidelity security interesting red cases. From external customers and internal evaluation, we have a median 90 percent reduction in alert fatigue.”]

Source: https://azure.microsoft.com/en-us/blog/reducing-security-alert-fatigue-using-machine-learning-in-azure-sentinel/

Exit mobile version