Detections

August 29, 2025

Microsoft Entra ID Conditional Access Rules: Incident Configuration Fix Resolves Rule Creation Failures

Microsoft Entra ID Conditional Access detection rules updated to fix lookbackDuration format preventing rule deployment in Microsoft Sentinel workspaces. Read More →

August 28, 2025

Threat Intelligence Detection: Alert Description Field Mapping Fix Restores Dynamic Content

Threat Intelligence DomainEntity_imWebSession rule updated to fix alert description field mapping, replacing non-existent Type field with ThreatType for proper alert context. Read More →

Auto-generated content based on the Azure-Sentinel GitHub repo.

Microsoft Sentinel is a trademark of Microsoft Corporation.