Using the Microsoft Sentinel Incidents page

To look at the Microsoft Sentinel Incidents page, click on the Incidents link in the left-hand navigation panel. This will take you to the Incidents page, as shown in the following screenshot. The actual numbers and incidents listed may be different, of course:

Figure 9.1 – The Microsoft Sentinel Incidents page

The page has been broken up into the header bar, the summary bar, the search and filtering section, the incidents listing, and the incident details pane. Each of these sections is described in more detail next.

The header bar

The header bar at the top of the page, shown in the following screenshot, has the usual Refresh button and timespan drop-down option. There is also another button called Actions:

Figure 9.2 – The Incidents page's header bar

The Actions button will allow you to perform actions against multiple incidents at once, including changing the severity...