How to Use the Advanced Commenting Editor for Azure Sentinel

Some may have noticed this week a few new capabilities have shown up in Azure Sentinel Incidents on the Comments tab.

It’s still early days for this enhanced functionality, but there’s enough here now to get a good head-start on developing some team policies around better commenting.

The following, shows the current interface of the enhanced commenting system. You can click the image to get a larger view.

New commenting capabilities

Additionally – and this is actually one of the more requested features of the commenting system – the new commenting system provides comment editing and deletion capabilities.

Editing and deleting comments

Lastly, the size of each comment has been increased 3000 characters.


[Want to discuss this further? Hit me up on Twitter or LinkedIn]