Forum Discussion
MiteshAgrawal
Feb 27, 2020Brass Contributor
How to export Incident list from Azure Sentinel?
Hi Team, We have a requirement to export all incidents generated in Azure Sentinel and update customer with the incident which were false positives, true positives, etc. How can we achieve th...
GaryBushey
Feb 27, 2020Bronze Contributor
MiteshAgrawal You are correct that you cannot do this via the console. You can however make some PowerShell calls to get this information.
I have a blog post that tells you how to do this: https://www.garybushey.com/2020/01/11/your-first-azure-sentinel-rest-api-call/
I also have on that shows you how to export the same data into PowerBI to make some nice charts and graphs: https://www.garybushey.com/2020/01/20/azure-sentinel-incidents-in-powerbi/
MiteshAgrawal
Feb 27, 2020Brass Contributor
- GaryBusheyFeb 28, 2020Bronze Contributor
MiteshAgrawal Looks like my server is down. I'll see about getting it back up. Thanks for letting me know