Summary and resources

Completed

You should have learned how to normalize and use ASIM Parsers in Microsoft Sentinel.

You should now be able to:

  • Use ASIM Parsers
  • Create ASIM Parser
  • Create parameterized KQL functions

Learn more

You can learn more by reviewing the following.

Become a Microsoft Sentinel Ninja

Microsoft Tech Community Security Webinars