A SOC needs telemetry from several security products. What should determine which Sentinel data connectors are configured?

Published
  1. Assume every connector ingests every product
  2. Supported source types, event requirements, authentication, and ingestion prerequisites
  3. Configure detection rules before checking whether data exists
  4. Only the connector's alphabetical position

Comments — 0