Blog Post

Microsoft Sentinel Blog
4 MIN READ

Sending enriched Microsoft Sentinel alerts to 3rd party SIEM and Ticketing Systems

YanivSh's avatar
YanivSh
Icon for Microsoft rankMicrosoft
Jun 11, 2020
(Last updated January 18th 2021)   Special thanks to Ofer_Shezaf and Alp Babayigit that collaborating with me on this blog post.   In the blog post we will introduce a solution which uses Log...
Updated Nov 02, 2021
Version 8.0
MaheshMarthi's avatar
MaheshMarthi
Copper Contributor
Nov 17, 2021

solman07 

You can use the Automation in Azure Sentinel.

Create a play book with incident trigger.

Create an automation rule to file a playbook on incident creation.

With in the playbook, with incident number on hand, you can query SecurityAlert and SecurityIncident Tables to get more info that would enrich your ticket.