Forum Discussion
Malformed user agent alert received
Hi, I am receiving alerts in sentinel as "Malformed user agent" and its showing me the IP address but no other details. Can someone help on what exactly is this, I have few confusions below, 1....
AnupamN To check the event details associated with the incident, open the incident details and under Events tab click on the hyperlink shown below:
To investigate follow the steps here: https://docs.microsoft.com/en-us/azure/sentinel/tutorial-investigate-cases
Read upon "Malformed user agent"
Query SecurityAlerts table under Logs: