Microsoft Sentinel Incident Investigation and Incident Management

[@frezerdugasa7937]

I really appreciate your work, Bro. I could not thank you enough for your video. You really make it Very simple and easy to understand.
I just want to wish you all success and achievements.
Keep Up!! The good work.
Thanks☺

[@SudoRootcast]

You are most welcome

[@ravbhuva]

How do you block, Sandbox, or Isolate devices or Networks?

[@haricharantg5274]

very Understandable video so far

[@SudoRootcast]

Thanks!

[@RawiChadulla]

How to Identify the Incident is a "True Positive or false Positive" and can you explain one true positive case Incident. It will helpfull

[@SudoRootcast]

Basically if it is related to some Malicious activities or there are some malicious Entities Like IP, URL, DNS, etc. You can treat that as a True positive.
False positive is something which have Inaccurate or incomplete data.

[@appasahebaddodagi]

thank you

[@SudoRootcast]

You're welcome

[@Cybergazi007]

Awesome video
Thank bro

[@SudoRootcast]

Glad you liked it

[@MrVinay-xj2ug]

Superb 👌👌👌

[@SudoRootcast]

Thanks 🤗

[@chintallakavitha5279]

Awesome

[@naxeltechnologies4700]

Amazing

[@SudoRootcast]

Thank you! Cheers!

[@haseebmohd6063]

Hi , how do we reach you

[@SudoRootcast]

Please email me at "[e-mail]". Thank You.

[@martinbaran7570]

not great