Forum Discussion
Incident URL
GaryBushey If an incident is triggered by a Microsoft Service data connector > Incidents > View Full Details > ALERT ID > ExtendedLinks should contain two Href links - one might be the security policy ID and the other the Security Alert ID - if you navigate to the URL in the Security alert ID is this the link you were looking for?
- CurlXMay 27, 2020Copper Contributor
@ Nicholas DiCola (SECURITY JEDI)
As a Security Analyst I prefer to go to the original Dashboard (e.g. in case I receive an MCAS ord Defender Alert in Sentinel, I like to jump out of Sentinel and go to the original Dashboard, as I have more analysis option there). Is there an easy way to navigate to the Source Dashboard? I think it is not so user friendly to search for the url in the logs (Extended Links).
- GaryBusheyMay 28, 2020Bronze Contributor
CurlX I would suggest adding this to the Azure Sentinel feedback site: https://feedback.azure.com/forums/920458-azure-sentinel
- CurlXMay 29, 2020Copper Contributor
Great point. I already found it written by someone else 🙂
https://feedback.azure.com/forums/920458-azure-sentinel/suggestions/39285991-improve-incident-link-reference