Forum Discussion
mperrotta
Jun 10, 2020Brass Contributor
Adding Incident URL to Email
I have seen a few people ask how to get the Incident URL to show up in an email when calling a playbook. I was able to get this working by manually constructing the URL. I would consider this more of...
Rod_Trent
Microsoft
Jun 10, 2020mperrotta This is great. Nice job!
I also have a KQL query that parses it out of AzureActivity:
https://github.com/rod-trent/SentinelKQL/blob/master/SentinelIncidentURLs-%20ALL.txt