Exam SC-200 topic 3 question 29 discussion

DRAG DROP -
You need to use an Azure Sentinel analytics rule to search for specific criteria in Amazon Web Services (AWS) logs and to generate incidents.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/detect-threats-custom