Create a notebook
To start with Notebooks, use the "Getting Started Guide For Microsoft Sentinel ML Notebooks" notebook.
In the Microsoft Sentinel Workspace, select Notebooks
You need to create an AzureML Workspace. Select Configure Azure Machine Learning then Create new Azure ML workspace.
In the Subscription box, select your subscription.
Select Create a new Resource group and choose a name for your new resource group.
In the Workspace details section:
Give your workspace a unique name.
Choose your Region
Save your Storage account, Key vault, and Application insights information.
The Container registry option can remain as None.
At the bottom of the page, select Review + create. Then on the next page, select create. It will take a moment to deploy the workspace.
Navigate to the Microsoft Sentinel workspace, select Notebooks.
Select the Templates tab.
Select the A Getting Started Guide For Microsoft Sentinel ML Notebooks from the list.
Select Create from template on the bottom of the right page.
Select the Save.
Select the Launch notebook.
Next to the Compute instance selector at the top of the screen, select the +.
Choose your compute settings.
Name your Compute instance and select the Create button at the bottom of the screen.
Wait for the compute instance to finish creating.
In the top right of the notebook, select a Kernel to use if not selected.
Follow the instructions in the Notebook.