https://techcommunity.microsoft.com/discussions/microsoftsentinel/threatintelligenceindicator-vs-commonsecuritylogmaliciousip---is-one-better-than/3841878
Threatintelligenceindicator vs CommonsecurityLog:MaliciousIP - is one better than the other? |...
Hi here, All logs coming into the CommonSecurityLog table are automatically mapped to malicious IPs, which produces new fields for:MaliciousIP,...
better thanvsone