Skip to content

Commit 5d4de9e

Browse files
Merge pull request #308888 from poliveria/poliveria-triage-corrections
Update Sentinel MCP triage tool documentation
2 parents 9a732f7 + f1cec23 commit 5d4de9e

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

articles/sentinel/datalake/sentinel-mcp-triage-tool.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ To access the triage tool collection, you must have the following prerequisites:
3232

3333
## Add the triage collection
3434

35-
To add the data exploration collection, you must first set up add Microsoft Sentinel's unified MCP server interface. Follow the step-by-step instructions for compatible [AI-powered code editors and agent-building platforms](sentinel-mcp-get-started.md#add-microsoft-sentinels-collection-of-mcp-tools).
35+
To add the data exploration collection, you must first set up add Microsoft Sentinel's unified MCP server interface. Follow the step-by-step instructions for compatible AI-powered code editors and agent-building platforms listed in the **Prerequisites** section.
3636

3737
The triage collection is hosted at the following URL:
3838

@@ -44,7 +44,7 @@ https://sentinel.microsoft.com/mcp/triage
4444

4545
### List security incidents (`ListIncidents`)
4646

47-
This tool lists security incidents and filters them by date range, severity, status, assigned analyst, and investigation state. It can paginate up to 10,000 incidents per page.
47+
This tool lists security incidents and filters them by date range, severity, status, assigned analyst, and investigation state.
4848

4949
| Parameters | Required? | Description |
5050
|---|---|---|
@@ -72,7 +72,7 @@ This tool retrieves a security incident by ID, including its properties, correla
7272

7373
### List security alerts related to an incident (`ListAlerts`)
7474

75-
This tool lists security alerts, sorts them, and filters them by date range, severity, and status. It can paginate up to 10,000 alerts per call.
75+
This tool lists security alerts, sorts them, and filters them by date range, severity, and status.
7676

7777
| Parameters | Required? | Description |
7878
|---|---|---|
@@ -83,7 +83,7 @@ This tool lists security alerts, sorts them, and filters them by date range, sev
8383
| `skip` |No | Skips a specified number of items from the start of the result set|
8484
| `top` |No | Limits the number of items returned in the response|
8585

86-
### Get a security incident (`GetAlertByID`)
86+
### Get a security alert (`GetAlertByID`)
8787

8888
This tool retrieves a security alert by ID. It returns the complete alert details, including severity, status, classification, and related evidence entities.
8989

0 commit comments

Comments
 (0)