Blog Post

Microsoft Sentinel Blog

6 MIN READ

Azure Sentinel: Creating Custom Connectors

Microsoft

Sep 19, 2019

Note! This blog post is now part of the official Azure Sentinel documentation, and updated there. This blog post is obsolete. Before you go the custom connector way Want to include you...

Updated Feb 11, 2021

Version 31.0

connectors

Ofer_Shezaf

Microsoft

Joined March 01, 2019

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

SocInABox

Iron Contributor

Aug 26, 2020

Hi Ofer_Shezaf , Valon_Kolica ,
Love your articles!

Question: When pulling alerts from Sentinel using the Graph API, some important fields, like entity/mapped entities, don't seem to be available.
Is there a way to see these fields in Graph or can I create a new analytics rule that queries all incidents and changes the field mappings (eg. put entity in the comments field) so I can pull these important details using Graph?

Thank you.