MicrosoftA tip for anyone trying this in a playbook.
If you add html markups to the Azure Sentinel "Add comment to incident" operator, it may not show up in the comments as you expect.
Likely because that operator has a built in editor, so it expects you to format using its own editing tools.
However if you create a variable and add your markups inside the variable they will be allowed.
eg. create a string variable named 'test1' and add this content:
<h1> Testing </h1>\n<table>\n <tr>\n <th>Person 1</th>\n <th>Person 2</th>\n <th>Person 3</th>\n </tr>\n <tr>\n <td>val1</td>\n <td>val2</td>\n <td>val3</td>\n </tr>\n </tr>\n</table>
Then add test1 to the "Add comment to incident" operator.
Resulting comment:
