Cortex XDR 5.x
Configure diagnostic settings
Configure diagnostic settings for AI activity data collection.
Configure diagnostic settings:
In your Azure API Management instance, navigate to APIs → Select an API.
Navigate to Monitoring → Diagnostic settings.
Click Add diagnostic settings.
Under Logs, select audit. Under Destination details, select Stream to an event hub.

In contrast to standard Analytics issues, ABIOCs indicate a single event of suspicious behavior with an identified chain of causality. To identify the context and chain of causality, ABIOCs leverage user, endpoint, and network profiles. The profile is generated by the Analytics Engine and can be based on a simple statistical profile or a more complex machine-learning profile.
Last updated
Was this helpful?
