You have an Azure subscription that contains a Microsoft Sentinel workspace.

You create a new Microsoft Sentinel rule named Rule$1$ by using a pre$-$defined template from the Microsoft Sentinel GitHub repository.

You need to edit Rule$1.$

Which field will be set to read$-$only with a pre$-$defined value?

Select only one answer.

Conditions for the automated response

Microsoft security service

Status

Trigger for the automated response