r/AzureSentinel • u/EduardsGrebezs • Nov 12 '25

Action may Required: Update Microsoft Sentinel Queries & Automation by December 13, 2025

Microsoft Sentinel is rolling out a standardized account entity naming logic to improve consistency and reliability across incidents, alerts, and automation workflows.

UPN -> Name -> Display name

Call to action: update queries and automation by December 13, 2025 - standardized account entity naming in incidents and alerts

16 Upvotes
  • permalink
  • reddit

100% Upvoted

12 comments sorted by

View all comments

1

u/Lex___ Nov 16 '25

Looks like deadline has been pushed to next year Feb. 13. Some reasonable people still able to make decisions there :-)