Customer CUSTOMER_NAME notified of anomalous activity in Azure subscription

To make matters worse, the export function only includes the title of the alert and not the description details, so you cannot export the list to excel to help sort these false positives from any "actual" alerts that might be lost within.

You cannot see more than 5 alerts at a time, making scrolling through the 207 alerts i currently have a nightmare. 

If you scroll to say, page 15 and click an alert, when you go back, you start back on page 1. 

You cannot bulk/edit alerts, meaning every single interaction has to be manual.

The "resolution code" options are non-sensical

When the alerts ARE valid, they often do not give you enough information to ACTUALLY investigate, ie: "Cryptomining detected on VM1" - customer will ask "well we didn't do anything, what should we search for to help find this alleged cryptomining software?" - escalate to microsoft for more details who will say "sorry we cannot tell you".

Prone to false alerts: One day in 2025 Microsoft decided that Cloudflare was a cryptomining pool, creating over 1000 alerts for us over a weekend. Even after discovering this error and acknowledging the false positive, no action was taken to "undo" the alerts, so we were left to cleanup manually.