Where can we read up on the following news point (only visible in this blogg):
- Custom Detections support in Microsoft Sentinel Repositories. Custom Detections can now be managed as code in Microsoft Sentinel Repositories, the same way customers already manage analytic rules, playbooks, parsers and workbooks. Detection engineers connect a GitHub or Azure DevOps repo to their workspace; Custom Detections placed in the repo are reconciled on every commit. A standalone Bicep path via the Microsoft Security Bicep extension lets teams deploy from any CI/CD pipeline (ADO Pipelines, GitHub Actions, custom runners).
I tried making a new Azure DevOps connecting and the powershell script that is automatically created has no support for Custom Detections. (This script should be available on your github btw, would be great to see if any updates are made to it!). Also, https://learn.microsoft.com/en-us/azure/sentinel/ci-cd-custom-content#how-microsoft-sentinel-repositories-work states no support for custom detections yeat. And there is no template for Custom Detections for ci-cd pipelines. I have built my own using webextensions and can deploy them in xdr portal, but those (json/yaml) did not work in the devops ci-cd.
So some more information on this would be great :)