You create a hunting query in Azure Sentinel. You need to receive a notification in the Azure portal as soon as the hunting query detects a match on the query. The solution must minimize effort…

The correct answer is C. a livestream. Livestream notifications for new events use Azure portal notifications, you see these notifications whenever you use the Azure portal. https://docs.microsoft.com/en-us/azure/sentinel/livestream#receive-notifications-when-new-

Submitted by noor.lb· Apr 18, 2026Manage threat hunting in Microsoft Sentinel

Question

You create a hunting query in Azure Sentinel. You need to receive a notification in the Azure portal as soon as the hunting query detects a match on the query. The solution must minimize effort. What should you use?

Options

Aa playbook
Ba notebook
Ca livestream
Da bookmark

How the community answered

(25 responses)

B
4% (1)
C
88% (22)
D
8% (2)

Explanation

Livestream notifications for new events use Azure portal notifications, you see these notifications whenever you use the Azure portal. https://docs.microsoft.com/en-us/azure/sentinel/livestream#receive-notifications-when-new-

Topics

#Azure Sentinel#Threat Hunting#Livestream#Real-time Detection

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice