AZ561510 - Generally Available: Sentinel TI - improved pattern parsing & revoke reliability

Azure Updates

Discussionpowered by zap.ms

Published

May 12, 2026

Status

Launched

Timeline

  • April 2026
    General Availability

Product

Microsoft Sentinel

Tag

Features

Category

Hybrid + multicloud
Security

Description

We’ve rolled out two important improvements to enhance accuracy and control in pattern-based workflows: 

  • Revoke fix: Resolved an issue where revoke actions were not consistently applied, ensuring changes now take effect reliably and as intended. 
  • Support for AND in pattern parsing: You can now combine conditions using AND, enabling more precise and expressive pattern definitions. 

These updates help you manage indicators and patterns with greater confidence and precision.