Custom App with authentication log

[leandrojmp (Leandro Pereira)]

@william.cheang

In this case, we can create our own custom ML job to perform on Unusual Login volume &
Brute Force Detection based on customapp data source, correct ?

Basically yes, you can create a custom ML job and a custom rule based on this ML.

All pre-built ML Jobs and Detection Rules will use data from know integrations, like System, Audit etc.

Any logs from Custom Applications will require custom ML jobs and custom security rules.

Also keep in mind the ML requires a paid license.