Sentinel Active Rules

Hyago Santana Mariano 0 Reputation points
2024-06-05T17:39:53.08+00:00

I would like to see the datas about my active rules, for example, I would like to see the Created Date about my rules. I can see only the column "last modified".

Can I see this informations using KQL?

Obs: I only use the table Security Incidents and Security Alerts..

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,037 questions
{count} votes

1 answer

Sort by: Most helpful