applies to, metadata, includes

batamig · batamig · commit ab2c00634e64 · 2024-03-28T14:42:50.000+02:00
diff --git a/articles/sentinel/add-advanced-conditions-to-automation-rules.md b/articles/sentinel/add-advanced-conditions-to-automation-rules.md
@@ -6,7 +6,7 @@ author: batamig
 ms.author: bagol
 ms.date: 03/14/2024
 appliesto:
-    - Microsoft Defender XDR
+    - Microsoft Sentinel in the Azure portal
     - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 
diff --git a/articles/sentinel/add-entity-to-threat-intelligence.md b/articles/sentinel/add-entity-to-threat-intelligence.md
@@ -6,7 +6,8 @@ author: yelevin
 ms.author: yelevin
 ms.topic: how-to
 ms.date: 3/14/2024
-appliesto: Microsoft Sentinel in the Azure portal
+appliesto: 
+    - Microsoft Sentinel in the Azure portal
 ms.collection: usx-security
 #Customer intent: As a security analyst, I want to quickly add relevant threat intelligence from my investigation for myself and others so I don't lose important information.
 ---
diff --git a/articles/sentinel/authenticate-playbooks-to-sentinel.md b/articles/sentinel/authenticate-playbooks-to-sentinel.md
@@ -5,7 +5,9 @@ ms.topic: how-to
 author: batamig
 ms.author: bagol
 ms.date: 03/14/2024
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 
 ---
diff --git a/articles/sentinel/automate-incident-handling-with-automation-rules.md b/articles/sentinel/automate-incident-handling-with-automation-rules.md
@@ -5,7 +5,9 @@ ms.topic: conceptual
 author: batamig
 ms.author: bagol
 ms.date: 03/14/2024
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 
 ---
diff --git a/articles/sentinel/automate-responses-with-playbooks.md b/articles/sentinel/automate-responses-with-playbooks.md
@@ -5,7 +5,9 @@ ms.topic: conceptual
 author: batamig
 ms.author: bagol
 ms.date: 03/14/2024
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 
 ---
diff --git a/articles/sentinel/automation.md b/articles/sentinel/automation.md
@@ -5,7 +5,9 @@ ms.topic: conceptual
 author: batamig
 ms.author: bagol
 ms.date: 03/14/2024
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 
 ---
diff --git a/articles/sentinel/billing-monitor-costs.md b/articles/sentinel/billing-monitor-costs.md
@@ -7,7 +7,9 @@ ms.custom: subject-cost-optimization
 ms.topic: conceptual
 ms.date: 03/07/2024
 ms.collection: usx-security
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ---
 
 # Manage and monitor costs for Microsoft Sentinel
diff --git a/articles/sentinel/billing.md b/articles/sentinel/billing.md
@@ -7,7 +7,9 @@ ms.custom: subject-cost-optimization
 ms.topic: conceptual
 ms.date: 03/07/2024
 ms.collection: usx-security
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 #Customer intent: As a SOC manager, plan Microsoft Sentinel costs so I can understand and optimize the costs of my SIEM.
 ---
 
diff --git a/articles/sentinel/bookmarks.md b/articles/sentinel/bookmarks.md
@@ -6,7 +6,9 @@ author: austinmccollum
 ms.topic: how-to
 ms.date: 03/12/2024
 ms.collection: usx-security
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ---
 
 # Keep track of data during hunting with Microsoft Sentinel
@@ -33,6 +35,8 @@ Viewing bookmarks from the table enables you to filter, summarize, and join book
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
+[!INCLUDE [unified-soc-preview](includes/unified-soc-preview.md)]
+
 ## Add a bookmark
 
 Create a bookmark to preserve the queries, results, your observations, and findings.
diff --git a/articles/sentinel/ci-cd.md b/articles/sentinel/ci-cd.md
@@ -6,7 +6,9 @@ author: austinmccollum
 ms.topic: how-to
 ms.date: 03/07/2024
 ms.author: austinmc
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 #Customer intent: As a SOC collaborator or MSSP analyst, I want to know how to connect my source control repositories for continuous integration and continuous delivery (CI/CD). Specifically as an MSSP content manager, I want to know how to deploy one solution to many customer workspaces and still be able to tailor custom content for their environments.
 ---
diff --git a/articles/sentinel/configure-data-connector.md b/articles/sentinel/configure-data-connector.md
@@ -3,9 +3,12 @@ title: Connect your data sources to Microsoft Sentinel by using data connectors
 description: Learn how to install and configure a data connector in Microsoft Sentinel.
 author: cwatson-cat
 ms.topic: how-to
-ms.date: 02/27/2024
+ms.date: 03/28/2024
 ms.author: cwatson
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
+ms.collection: usx-security
 #customer intent: As a security architect or SOC analyst, I want to connect my data source so that I can ingest data into Microsoft Sentinel for security monitoring and threat protection.
 ---
 
diff --git a/articles/sentinel/connect-data-sources.md b/articles/sentinel/connect-data-sources.md
@@ -5,7 +5,9 @@ author: yelevin
 ms.topic: conceptual
 ms.date: 03/02/2024
 ms.author: yelevin
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 #customer intent: As a security architect or SOC analyst, I want to understand what data connectors are in Microsoft Sentinel.
 ---
 
diff --git a/articles/sentinel/connect-mdti-data-connector.md b/articles/sentinel/connect-mdti-data-connector.md
@@ -6,7 +6,9 @@ author: austinmccollum
 ms.topic: how-to
 ms.date: 3/14/2024
 ms.author: austinmc
-appliesto: Microsoft Sentinel in the Azure portal and the Microsoft Defender portal
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
 ms.collection: usx-security
 #customer intent: As a SOC admin, I want to utilize the best threat intelligence from Microsoft, so I can generate high fidelity alerts and incidents.
 ---
diff --git a/articles/sentinel/connect-threat-intelligence-taxii.md b/articles/sentinel/connect-threat-intelligence-taxii.md
@@ -25,6 +25,8 @@ Learn more about [Threat Intelligence](understand-threat-intelligence.md) in Mic
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
+[!INCLUDE [unified-soc-preview](includes/unified-soc-preview.md)]
+
 **See also**: [Connect your threat intelligence platform (TIP) to Microsoft Sentinel](connect-threat-intelligence-tip.md)
 
 ## Prerequisites  
diff --git a/articles/sentinel/connect-threat-intelligence-tip.md b/articles/sentinel/connect-threat-intelligence-tip.md
@@ -29,6 +29,8 @@ Learn more about [Threat Intelligence](understand-threat-intelligence.md) in Mic
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
+[!INCLUDE [unified-soc-preview](includes/unified-soc-preview.md)]
+
 ## Prerequisites  
 
 - In order to install, update and delete standalone content or solutions in content hub, you need the **Microsoft Sentinel Contributor** role at the resource group level.
diff --git a/articles/sentinel/connect-threat-intelligence-upload-api.md b/articles/sentinel/connect-threat-intelligence-upload-api.md
@@ -22,6 +22,7 @@ Many organizations use threat intelligence platform (TIP) solutions to aggregate
 > [!IMPORTANT]
 > The Microsoft Sentinel upload indicators API and **Threat Intelligence Upload Indicators API** data connector are in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
 >
+> [!INCLUDE [unified-soc-preview-without-alert](includes/unified-soc-preview-without-alert.md)]
 
 [!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
 
diff --git a/articles/sentinel/create-nrt-rules.md b/articles/sentinel/create-nrt-rules.md
@@ -3,8 +3,12 @@ title: Work with near-real-time (NRT) detection analytics rules in Microsoft Sen
 description: This article explains how to view and create near-real-time (NRT) detection analytics rules in Microsoft Sentinel.
 author: yelevin
 ms.topic: how-to
-ms.date: 11/02/2022
+ms.date: 03/28/2024
 ms.author: yelevin
+appliesto:
+    - Microsoft Sentinel in the Azure portal
+    - Microsoft Sentinel in the Microsoft Defender portal
+ms.collection: usx-security
 ---
 # Work with near-real-time (NRT) detection analytics rules in Microsoft Sentinel
 
