Blog Post

Microsoft Sentinel Blog
3 MIN READ

Using the new built-in URL detonation in Azure Sentinel

Amar Patel (C AND E)'s avatar
Amar Patel (C AND E)
Icon for Microsoft rankMicrosoft
Nov 11, 2019
Last week at Ignite, we announced the public preview of URL detonation in Azure Sentinel. This blog post provides more details on its benefits and how to enable it.   Security operations center (...
Updated Nov 03, 2021
Version 3.0
detection
investigation
microsoft sentinel
security
secopsmcc's avatar
secopsmcc
Copper Contributor
Jan 29, 2024

This feature seems to work best for Sentinel Incidents that are created from ASI sheduled alerts, and not those Incidents that are created from other security alerts.
Even then, it is not consistant about which URLS get detonated and which do.