What should you use?

You create a hunting query in Azure Sentinel.

You need to receive a notification in the Azure portal as soon as the hunting query detects a match on the query. The solution must minimize effort.

What should you use?
A . a playbook
B. a notebook
C. a livestream
D. a bookmark

View Answer

Answer: C

Explanation:

Use livestream to run a specific query constantly, presenting results as they come in.

Reference: https://docs.microsoft.com/en-us/azure/sentinel/hunting