An Azure service that provides a hybrid, multi-cloud management platform for APIs.
Sentinel’s management APIs remain available after the March 31, 2027 retirement of Sentinel in the Azure portal. If ur connector uses SecurityInsights incidents, test it with a workspace connected to Defender.
Use properties.additionalData.providerIncidentUrl for the Defender link in ServiceNow, since incidentUrl still points to the Azure portal. Check any providerName filters too, as that value becomes Microsoft XDR.