Blog Post

Microsoft Sentinel Blog

3 MIN READ

New Year - New Official Azure Sentinel PowerShell Module!

Microsoft

Feb 01, 2021

Happy New Year everyone! With the new year comes a new Azure Sentinel PowerShell module! Based on the Azure SDK for .NET and part of the Azure (Az) module, we are announcing the public previe...

Updated Nov 03, 2021

Version 13.0

microsoft sentinel

powershell

Tiander Turpijn

Microsoft

Joined September 26, 2018

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

Kirederf

Copper Contributor

Mar 11, 2021

Could you elaborate on why the module is limited in the number of tickets can be managed? It looks like its the last 1500 only and set as a constant.

private const int MaxIncidentsToFetch = 1500;

Also, Update-SentineltIncident cannot work with IncidentNumber as inputparam, but only Incident ID.

The above leaves this module unable to work with older incidents. Is this on purpose or just some missing development? (Please correct me if i'm wrong)