Correct: * notebooks Jupyter notebooks combine full programmability with a huge collection of libraries for machine learning, visualization, and data analysis. These attributes make Jupyter a compelling tool for security investigation and hunting. * workbooks (best) In Microsoft Sentinel, Workbooks are for interactive, visual dashboards (like Power BI) for monitoring and reporting, ideal for SOC analysts to see trends and metrics. Incorrect: * built-in queries * livestream * bookmarks Reference: https://docs.microsoft.com/en-us/azure/sentinel/notebooks https://learn.microsoft.com/en-gb/azure/sentinel/resources