Skip to content

Commit b1cd0b5

Browse files
authored
Added remediation recommendation
1 parent ee9e491 commit b1cd0b5

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

articles/sentinel/customize-alert-details.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,8 @@ Follow the procedure detailed below to use the alert details feature. These step
9292
> - **Do not customize** the *ProductName* field for alerts from Microsoft sources. Doing so will result in these alerts being dropped from Microsoft Defender XDR and no incident being created.
9393
>
9494
> - The *ProductComponentName* and *ProviderName* fields are no longer available to be customized.
95+
>
96+
> If any of these customizations already exist in any of your rules, remove the customizations to maintain compatibility and avoid unexpected results.
9597
9698
If you change your mind, or if you made a mistake, you can remove an alert detail by clicking the trash can icon next to the **Alert property/Value** pair, or delete the free text from the **Alert Name/Description Format** fields.
9799

0 commit comments

Comments
 (0)