Appearance
Detect threats across all your tenants
Monitor all your client tenants from a single deployment
Timer-triggered polling from Graph API and Management Activity API
JSON-based rule definitions for audit logs, sign-ins, and security alerts