Merge pull request #4431 from MicrosoftDocs/case-management-limitations

Case management limitations

Author: guywi-ms

unified-secops-platform/cases-overview.md

@@ -77,7 +77,6 @@ To start using case management, select **Cases** in the Defender portal to acces
 
 :::image type="content" source="media/cases-overview/cases-queue-view.png" alt-text="Screenshot of the cases queue in the Defender portal.":::
 
-The maximum allowed per tenant is 100,000 cases.
 
 ## Case details
 
@@ -127,8 +126,6 @@ Alternatively, if the IR team needs to escalate one or more incidents to the hun
 
 :::image type="content" source="media/cases-overview/link-incident-from-incident-graph.png" alt-text="Screenshot showing the link incident option from ellipses menu in the incident view.":::
 
-Each case has a threshold of 100 linked incidents.
-
 ### Activity log
 
 Need to write down notes, or that key detection logic to pass along? Create rich text comments and review the audit events in the activity log. Comments are a great place to quickly add information—including such things as queries, tables, links, and structured content—to a case.
@@ -145,6 +142,10 @@ Share reports, emails, screenshots, log files, and more, all centralized in the
 
 To add attachments to your case, go to the **Case details** page, select the **Attachments** tab, select **Upload**, select your file, and wait for the upload to complete. Once uploaded, the file is scanned in the background for malware. When the scan is complete, anyone with access to the case can download the file. If the file you want to upload is actually a malware sample, you can wrap it in a password-protected ZIP file.
 
+## Limitations
+
+See [Case management limits](/azure/sentinel/sentinel-service-limits#case-management-limits).
+
 ## Related content
 
 - [Microsoft Sentinel blog - Improve SecOps collaboration with case management](https://techcommunity.microsoft.com/blog/MicrosoftSentinelBlog/improve-secops-collaboration-with-case-management/4369044)