You have an Azure subscription that contains a Microsoft Sentinel workspace.

You need to identify the Microsoft Sentinel alerts associated to a specific user and the computer used by that user. The solution must minimize administrative effort.

What should you use?

Select only one answer.

a notebook

a playbook

a workbook

an entity