How to Use HTML and Markdown in Azure Sentinel Incident Comments

Azure Sentinel 1 Minute

Just recently the Azure Sentinel team has added the capability for customers to use HTML and Markdown in the Comment section of Incidents. And, to ensure that there’s enough room for the additional content, the comments field has been expanded to support 3,000 characters (1,000 was the default limit).

This gives customer the ability to provide immediate value for documenting with additional context and the capability to view the context in a more meaningful way.

The following screen capture shows what this looks like…

Better format for commenting

And, the following is the code for what’s shown in the image for you to test in an Incident of your own… 

<h2>This is a valuable link reference to monitoring for Zerologon</h2>

[How to Monitor Compliant and Non-compliant Systems for Zerologon Using Azure Sentinel](https://azurecloudai.blog/2020/09/23/how-to-monitor-compliant-and-non-compliant-systems-for-zerologon-using-azure-sentinel/)

<table>
  <tr>
    <th>Located by</th>
    <th>Submitted by</th>
  </tr>
  <tr>
    <td>Lee</td>
    <td>Jaime</td>
  </tr>
  <tr>
    <td>Majors</td>
    <td>Sommers</td>
  </tr>
</table>

Create something extra cool that you’re proud of? Share it! Send me a screen capture on Twitter and make sure to use the #AzureSentinel hashtag.

[Want to discuss this further? Hit me up on Twitter or LinkedIn]

UPDATE, October 2, 2020: This should now be available for everyone.

P.S. This feature is just rolling out so if it’s not available yet in your tenant – as Ace Ventura has famously said – “…just wait longer.”

Author

Published