Jeremy Tan comments

Results 7 comments of


                                            Jeremy Tan

Port Scan Analytic Rule not Populating Entities list in Incident

Hi @wingcomm, kindly open a support ticket for this.

No tabular expression statement found - NewResourceGroupsDeployedTo.yaml - Suspicious Resource deployment

@rweirtbg, quick fix would be to remove the first empty line in the rule's query and you won't see the error anymore for subsequent alerts. ![image](https://user-images.githubusercontent.com/25794051/194866794-0833e7d8-70f5-4a1f-8eee-1e818d99d838.png)

Incident rule using bag_unpack not defining columnname in scheduled rule

Hi @Lodewyk-Git, did you get the latest version of this rule? It should have the highlighted line to prevent the error. ![image](https://user-images.githubusercontent.com/25794051/195495269-d54850a5-ec2b-4eed-9d76-e0823fef71e7.png)

Cannot Create Rule for "Threat Essentials - Multiple admin membership removals from newly created admin."

Hi @rweirtbg, I have tried creating the rule and was able to create it successfully. Can you please try again? Otherwise, kindly raise a support ticket as it might be...

Cannot Deploy AzurePortalSigninfromanotherAzureTenant.yaml - Persistent storage path does not exist.

Hi @rweirtbg, as mentioned in the query's comment the url will be updated regularly so you would need to update the file name manually. In order to fix it, edit...

8 Entity Activity templates with issues during out-of-the-box deployment

@mgijo , I believe this has been fixed. Proceed to close.

Analytic Update SigninLogs/BypassCondAccessRule

PR has been raised to fix the issue