Workarounds for Azure Sentinel SIR Closure
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-30-2025 09:37 AM
Hello,
Has anyone implemented a workaround to have Sentinel close SIR incidents since the integration is not bi-directional in this regard?
Thanks!
10 REPLIES 10
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
A new property has been introduced in June 2025 release to poll closed incidents.
Microsoft Azure Sentinel - Incident Ingestion Integration for Security Operations release notes
