Geomap Visualization Skill

Purpose

Generate interactive world map visualizations from Microsoft Sentinel data using the Sentinel Geomap MCP App. Geomaps display markers on a world map with coordinates, ideal for visualizing attack origins, geographic distribution of threats, or location-based security data.

📑 TABLE OF CONTENTS

1. Quick Start - Minimal example to get started
2. MCP Tool Reference - Parameters and schemas
3. Data Sources - Tables with native vs enriched geolocation
4. KQL Query Patterns - Ready-to-use queries by scenario
5. Enrichment Integration - Adding threat intel drill-down
6. Examples - End-to-end workflows
7. Follow-Up Investigation Queries - Queries for selected IPs
8. Interactive Selection Feature - Multi-select and chat integration