File tree Expand file tree Collapse file tree 1 file changed +8
-2
lines changed Expand file tree Collapse file tree 1 file changed +8
-2
lines changed Original file line number Diff line number Diff line change @@ -86,15 +86,21 @@ Add bookmarks to an incident from the bookmarks tab on the **Hunting** page.
86
86
87
87
1 . From the ** Bookmarks** tab, select the bookmark or bookmarks you want to add to an incident.
88
88
89
- 2 . Select ** Incident actions** from the command bar:
89
+ 1 . Select ** Incident actions** from the command bar:
90
90
91
91
:::image type="content" source="media/bookmarks/incident-actions.png" alt-text="Screenshot of adding bookmarks to incident.":::
92
92
93
- 3 . Select either ** Create new incident** or ** Add to existing incident** , as appropriate. Then:
93
+ 1 . Select either ** Create new incident** or ** Add to existing incident** , as appropriate. Then:
94
94
95
95
- For a new incident: Optionally update the details for the incident, and then select ** Create** .
96
96
- For adding a bookmark to an existing incident: Select one incident, and then select ** Add** .
97
97
98
+ 1 . To view the bookmark within the incident,
99
+ 1 . Go to ** Microsoft Sentinel** > ** Threat management** > ** Incidents** .
100
+ 1 . Select the incident with your bookmark and ** View full details** .
101
+ 1 . On the incident page, in the left pane, select the ** Bookmarks** .
102
+
103
+
98
104
## View bookmarked data in logs
99
105
100
106
View bookmarked queries, results, or their history.
You can’t perform that action at this time.
0 commit comments