The Threat Detection integration powered by Event Monitoring for Security Center is now generally available. Let machine learning identify and provide data on four types of threats across your connected tenants in real time.
Where: Security Center is available in Enterprise, Performance, Unlimited, and Developer editions as an add-on subscription.
Who: This change is available to customers who purchase Security Center and Event Monitoring add-on subscriptions.
How: From the Security Center dashboard in your parent tenant, click Threat Detection. Below the 30-day summary graph, choose a date. To see the details of a detected event, click the Threat Identifier value. The four supported security threats are: Credential Stuffing, API Anomaly, Session Hijacking, and Report Anomaly.
Monitor Security Threats with Centralized Threat Detection (Generally Available) (salesforce.com)