Azure Devops Pull Request Bypass does not mention pull request

[hazcod]

Is your feature request related to a problem? Please describe.

The current rule that triggers an incident in Sentinel when Microsoft Azure DevOps audit log mentions a pull request bypass does not mention the pull request itself in the entities list, only the user.

Describe the solution you'd like The pull request URL to be mentioned in the entities.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-prasadboke]

Hello hazcod Can you please elaborate this issue you are facing

[hazcod]

The incident created for this rule does not have the actual link to the pull request in the entities.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-amolpatil]

@hazcod Could you please specify which analytic rule you are taking about? Also could you please provide us an screenshot of error if available so that it will help us to investigate more. Thanks!

[hazcod]

@v-amolpatil : Azure DevOps Pull Request Policy Bypassing. This rule detection never mentions the pull request title as an entity.

[v-amolpatil]

Hi @hazcod, We have deployed latest version with change and is available in Marketplace. Hence closing the issue. Feel free to reopen if you need any assistance.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.