[standardization] Sentinel Watchlist, FetchIncidentCommentsfromSentinel #170
Conversation
mariocuomo
changed the title
There was a problem hiding this comment.
Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.
There was a problem hiding this comment.
The changes in the file Plugins/Community Based Plugins/Microsoft Sentinel Custom Plugin Scenarios/Sentinel Watchlists/Readme.md are as follows:
The title has been changed from "Creating a Security Copilot KQL Plugin to Query Sentinel Watchlists" to "Sentinel Watchlist integration in Security Copilot".
A new "DESCRIPTION" section has been added to describe the plugin and its capabilities.
The pre-requisites section has been replaced with a "TYPE AND REQUIREMENTS" section detailing the type of plugin, its source, and requirements.
A sample KQL query template has been added.
The instructions to upload the custom plugin have been replaced with a "SKILLS" section, including a table describing a skill named "GetTrustedUsers".
A "SAMPLE PROMPTS" section has been added with an example prompt.
A "SCREENSHOTS" section has been added, including an image of the trusted user watchlist.
These changes enhance the documentation by providing a clearer structure and additional information about the plugin's capabilities and usage.
No description provided.