StealthTalk

The **StealthTalk Anomalous Authentication** solution ingests StealthTalk Enterprise sign-in anomaly data into Microsoft Sentinel so SOC teams can investigate anomalous authentication activity alongside Microsoft security telemetry. The solution includes a Logs Ingestion API data connector, scheduled analytic rules, hunting queries, ASIM authentication parsers, a workbook, and a Microsoft Teams playbook. It depends on [Microsoft Sentinel](https://learn.microsoft.com/azure/sentinel/overview), [Azure Monitor Logs Ingestion](https://learn.microsoft.com/azure/azure-monitor/logs/logs-ingestion-api-overview), [custom tables](https://learn.microsoft.com/azure/azure-monitor/logs/create-custom-table), [Logic Apps](https://learn.microsoft.com/azure/logic-apps/logic-apps-overview), and [ASIM](https://learn.microsoft.com/azure/sentinel/normalization).