Data Source: Microsoft Sentinel Forwarded Events | Detection.FYI

Microsoft Sentinel External Alerts

Sep 19, 2026 · Data Source: Microsoft Sentinel Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts Rule Type: Custom Query (KQL) Rule Type: Higher-Order Data Source: Microsoft Sentinel Forwarded Events Domain: Cloud ·
Share on:

Generates a detection alert for each Microsoft Sentinel alert written to the configured indices. Enabling this rule allows you to immediately begin investigating Microsoft Sentinel alerts in the app.

Read More