Forum Discussion
Creating Manual Incidents
Hello,
I am looking for a way to manually create an incident within Sentinel without using Powershell. I am looking to create an incident that can be populated via the UI.
Has anyone come across this or have any suggestions?
Thanks in advance.
- You can create sample alerts in the Defender for Cloud portal that will show up in Sentinel, see https://azurecloudai.blog/2021/05/24/how-to-generate-azure-sentinel-incidents-for-testing/#:~:text=If%20you%20have%20Defender%20for%20Cloud%20connected%20to,also%20closes%20it%20out%20in%20Defender%20for%20Cloud. for some other approaches
- Thanks, Dean. I'll take a look at this and see if this is what our team is looking to do. I appreciate the input and direction!
