Microsoft is touting that they are offering machine learning as part of Azure Sentinel, something they call Azure Sentinel FUSION. I've written about it before here, and since general availability of Azure Sentinel it is enabled by default. You could easily be tricked into thinking that FUSION is marketing bingo, but nothing is truer: there are real machine learning models that help you in real world situations. One of the first that became available is named the "Advanced Multistage Detection". It was built on six years of experience with building machine learning modules for services such as Azure AD Identity Protection and such.