Tasks-Details of the Tasks missing in SecurityIncident table

Grace A 1

The Tasks added to an Incident don't have the Details (text added to the Task except the Title) in the SecurityIncident table or any other Table. Where can we find these details?

Givary-MSFT 35,216 Reputation points Microsoft Employee

2024-12-30T06:27:50.7733333+00:00

@Grace A Thank you for reaching out to us, let me research on this ask and revert back.
Grace A 1 Reputation point

2024-12-30T21:16:40.21+00:00
Thanks!

Also I checked the API https://learn.microsoft.com/en-us/rest/api/securityinsights/incident-tasks/list?view=rest-securityinsights-2024-09-01

Incident Tasks - List

Service:Sentinel

API Version:2024-09-01

And here i see the Field named "description" which has the information I am looking for

*"type": "Microsoft.SecurityInsights/Incidents/Tasks",* *"properties": {* *"title": "Automotive Threat Matrix - ATM",* ***"description": "<div><span style=\"color: rgba(0, 0, 0, 0.87);\">ATM-T0010</span></div><div><span style=\"color: rgba(0, 0, 0, 0.87);\"><span class=\"ql-cursor\"></span>ATM-T0054</span></div>",*** *"status": "New",*

This is missing in the SecurityIncidents table and that should not be the case. Please do not have me use an API to access that one detail.
Givary-MSFT 35,216 Reputation points Microsoft Employee

2025-01-02T06:40:47.3433333+00:00

@Grace A Still awaiting response from my team on this. I did come across this API but checking do we store this info in any of the tables.
Grace A 1 Reputation point

2025-01-20T11:09:05.29+00:00

hello Givary, do you have any update on this?

1 answer

Pauline Mbabu 595 Reputation points Microsoft Employee

2025-01-23T08:37:07.91+00:00

Hello Grace,
I investigated this and the details of the tasks added to an incident are not directly available in the SecurityIncident table. Unfortunately, the only way I could find to retrieve the Incident Task description details was by using the API.
If would like to have this added as a Feature request, kindly do so by opening a support ticket by following this guidance https://learn.microsoft.com/en-us/services-hub/unified/support/open-support-requests?tabs=existing-support-request-process.

If you find the answer above helpful, please Accept the answer to help anyone in the community who might have a similar question to quickly find the solution.
Please sign in to rate this answer.
Pauline Mbabu 595 Reputation points Microsoft Employee

2025-01-23T08:38:19.7633333+00:00

@Givary-MSFT In case you find any more relevant Information please add it here.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Tasks-Details of the Tasks missing in SecurityIncident table

1 answer

Your answer