Blog Post

Microsoft Sentinel Blog
4 MIN READ

Alert enrichment "how to reduce incident triage and investigation times using dynamic alert details”

romarsia's avatar
romarsia
Former Employee
Sep 01, 2021
In this blog post we will explore the new “Alert enrichment” in Azure Sentinel Analytics and do a deep dive into the "Alert details" dynamic content ability.   The “Alert enrichment” abilities ar...
Updated Nov 03, 2021
Version 2.0
detection
microsoft sentinel
security
romarsia's avatar
Former Employee
Joined January 05, 2021
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

Luizao_f's avatar
Luizao_f
Brass Contributor
Sep 03, 2021

I found this feature very interesting.
I'm structuring SIEM to bring a dynamic description of the alert, so this function was great.
The bad point is that it is possible to use only 3 columns in the description.
I imagine that in the future it should expand this number.