Microsoft Defender for Storage

If you use tags in your environment, you can use the 'Tags' filter in the Security Alerts view to only see alerts related to certain project/app/owner/whatever. As an alternative you can create your own custom 'response' feature using Workflow Automation. Check out our GitHub repo for ideas: https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Workflow%20automation

Please also keep in mind that Defender for Cloud is not a SIEM solution, so it does not have advanced capabilities like Sentinel or any 3rd party SIEM.