Skip to content

Commit b066e32

Browse files
authored
Merge pull request #291070 from batamig/granular-content-ii
granular content edits - Jan. Ofer.
2 parents 0de0db7 + d6dbc9b commit b066e32

File tree

6 files changed

+35
-11
lines changed

6 files changed

+35
-11
lines changed
837 Bytes
Loading
643 Bytes
Loading
420 Bytes
Loading
484 Bytes
Loading

articles/sentinel/sentinel-solutions-deploy.md

Lines changed: 18 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Discover and deploy Microsoft Sentinel out-of-the-box content from Conten
33
description: Learn how to find and deploy Sentinel packaged solutions containing data connectors, analytics rules, hunting queries, workbooks, and other content.
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 01/09/2025
6+
ms.date: 01/14/2025
77
ms.author: cwatson
88
appliesto:
99
- Microsoft Sentinel in the Azure portal
@@ -41,26 +41,35 @@ For more information about other roles and permissions supported for Microsoft S
4141

4242
## Discover content
4343

44-
The content hub offers the best way to find new content or manage the solutions you already installed.
44+
The content hub offers the best way to find new content or manage the solutions you already installed.
4545

4646
1. For Microsoft Sentinel in the [Azure portal](https://portal.azure.com), under **Content management**, select **Content hub**.<br> For Microsoft Sentinel in the [Defender portal](https://security.microsoft.com/), select **Microsoft Sentinel** > **Content management** > **Content hub**.
4747

4848
The **Content hub** page displays a searchable grid or a list of solutions and standalone content.
4949

50-
1. Filter the list displayed, either by selecting specific values from the filters, or entering any part of a content name or description in the **Search** field.
50+
1. Search for the solutions or standalone content items that you need. Either select specific values from the filters, or enter a search term into the **Search** box. Searches use AI to support fuzzy searches and approximate vocabulary.
5151

52-
For more information, see [Categories for Microsoft Sentinel out-of-the-box content and solutions](sentinel-solutions.md#categories-for-microsoft-sentinel-out-of-the-box-content-and-solutions).
52+
When searching, make sure to press **ENTER** to start the search. The number of search results is limited to 50 items, including both solutions and content items found within solutions. If you don't find what you're looking for, try refining the search expression or use different filters.
5353

54-
1. Select the **Card view** to view more information about a solution.
54+
For more information, see [Categories for Microsoft Sentinel out-of-the-box content and solutions](sentinel-solutions.md#categories-for-microsoft-sentinel-out-of-the-box-content-and-solutions).
5555

56-
Each content item shows categories that apply to it, and solutions show the types of content included. For example, in the following image, the **Cisco Umbrella** solution lists one of its categories as **Security - Cloud Security**, and indicates it includes a data connector, analytics rules, hunting queries, playbooks, and more.
56+
1. In the list view (:::image type="icon" source="media/sentinel-solutions-deploy/list-view.png" border="false":::), select a solution from the list to view information about the solution as well as the types of content items it includes.
5757

58+
Expand a solution in the search or filter results to view the list of content items it includes. The information pane on the side presents detailed information about the content item.
5859

59-
#### [Azure portal](#tab/azure-portal)
60+
#### [Azure portal](#tab/azure-portal)
6061
:::image type="content" source="./media/sentinel-solutions-deploy/solutions-list.png" alt-text="Screenshot of the Microsoft Sentinel content hub in the Azure portal.":::
6162

62-
#### [Defender portal](#tab/defender-portal)
63-
:::image type="content" source="./media/sentinel-solutions-deploy/solutions-list-defender.png" alt-text="Screenshot of the Microsoft Sentinel content hub in the Defender portal.":::
63+
#### [Defender portal](#tab/defender-portal)
64+
:::image type="content" source="./media/sentinel-solutions-deploy/solutions-list-defender.png" alt-text="Screenshot of the Microsoft Sentinel content hub in the Defender portal.":::
65+
66+
----
67+
68+
Alternately, select the card view (:::image type="icon" source="media/sentinel-solutions-deploy/card-view.png" border="false":::) to view solutions presented in a grid. Each card shows the solution name, description, and categories. Select a card to view more information about the solution on the side.
69+
70+
To use a content item that's part of a solution, you must install the entire solution. If you've selected a specific content item in the list view, select **Install solution** in the details pane on the side to install the relevant solution.
71+
72+
For more information, see [Categories for Microsoft Sentinel out-of-the-box content and solutions](sentinel-solutions.md#categories-for-microsoft-sentinel-out-of-the-box-content-and-solutions).
6473

6574

6675
## Install or update content

articles/sentinel/whats-new.md

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,7 @@ description: Learn about the latest new features and announcement in Microsoft S
44
author: yelevin
55
ms.author: yelevin
66
ms.topic: concept-article
7-
ms.date: 12/18/2024
8-
7+
ms.date: 01/14/2025
98

109
#Customer intent: As a security team member, I want to stay updated on the latest features and enhancements in Microsoft Sentinel so that I can effectively manage and optimize my organization's security posture.
1110

@@ -22,6 +21,22 @@ Get notified when this page is updated by copying and pasting the following URL
2221

2322
[!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
2423

24+
## January 2025
25+
26+
- [Microsoft Sentinel availability in Microsoft Defender portal](#microsoft-sentinel-availability-in-microsoft-defender-portal)
27+
28+
### View granular solution content in the Microsoft Sentinel content hub
29+
30+
Now you can view the individual content available in a specific solution directly from the **Content hub**, even before you've installed the solution. This new visibility helps you understand the content available to you, and more easily identify, plan, and install the specific solutions you need.
31+
32+
Expand each solution in the Content hub to view included security content. For example:
33+
34+
:::image type="content" source="media/sentinel-solutions-deploy/solutions-list.png" alt-text="Screenshot of showing granular content.":::
35+
36+
The granular solution content updates also include a generative AI-based search engine that helps you run more robust searches, diving deep into the solution content and returning results for similar terms.
37+
38+
For more information, see [Discover content](sentinel-solutions-deploy.md#discover-content).
39+
2540
## December 2024
2641

2742
- [New SOC optimization recommendation based on similar organizations (Preview)](#new-soc-optimization-recommendation-based-on-similar-organizations-preview)

0 commit comments

Comments
 (0)