↳ GitHub sourceWorkbook

User And Entity Behavior Analytics

Description

Identify compromised users and insider threats using User and Entity Behavior Analytics. Gain insights into anomalous user behavior from baselines learned from behavior patterns

Version: 2.0
Declared author / publisher: Microsoft

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Anomalies

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Workbooks/UserEntityBehaviorAnalytics.json ↗
Commit: 629d1d3 ↗
Source identifier: UserEntityBehaviorAnalyticsWorkbook

Additional source files 2

Workbooks/UserEntityBehaviorAnalytics.jsonsource ↗Workbooks/WorkbooksMetadata.jsonworkbook-metadata ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 17:57 UTC

GSTEP sync dates, separate from the source content’s publication dates.