Quick Tip: Expanding All Microsoft Sentinel Console Headers
Recent Changes
Nuanced changes and updates are expected in the Microsoft Sentinel console. I remember several years ago when I spent a lot of time traversing the US delivering Microsoft Sentinel workshops to customers, I’d show up to the customer to start our time together and have to quickly get up-to-speed on the changes - sometimes entire features would be in completely different places.
I remember saying things like “well, that changed” or “OK…ignore the screen shot on the slide, go here instead” many times.
Most times the changes were logical.
A recent change has proliferated to the Microsoft Sentinel console (the one that still exists in the Azure portal - not the one in the unified Defender console) that shows the Sentinel menu items in collapsed mode to start.
You can expand the menu by locating the hard-to-find Expand all headers option next to the Search box at the top left.
This is actually an Azure portal change that Sentinel adopted recently. There’s an option in Azure portal settings to force menus to expand by default, but the feature doesn’t yet work for Sentinel.
And, btw, the change brings both Sentinel in Azure and Sentinel in Defender very closely aligned in appearance and usage.
[Want to discuss this further? Hit me up on Twitter or LinkedIn]
[Subscribe to the RSS feed for this blog]
[ Subscribe to the Bi-weekly Copilot for Security Newsletter]
[Subscribe to the Weekly SIEM and XDR Newlsetter]
[Learn KQL with the Must Learn KQL series and book]
[Learn AI Security with the Must Learn AI Security series and book]
** Need a Tech break?? Sure, we all do! Check out my fiction novels: Sword of the Shattered Kingdoms: Ancient Crystal of Eldoria and WW2045: Alien Revenge