Merge pull request #13977 from Azure/v-kasghosh/issues_number/13860

Updated  "TI map Domain entity to SecurityAlert "  for Threat Intelligence (NEW)

Author: v-atulyadav

Solutions/Threat Intelligence (NEW)/Analytic Rules/DomainEntity_SecurityAlert.yaml

@@ -32,6 +32,7 @@ query: |
   let ioc_lookBack = 14d;
   let SecurityAlerts = SecurityAlert
   | where TimeGenerated > ago(dt_lookBack)
+  | where AlertName != "TI map Domain entity to SecurityAlert"
   | extend domain = todynamic(dynamic_to_json(extract_all(@"(((xn--)?[a-z0-9\-]+\.)+([a-z]+|(xn--[a-z0-9]+)))", dynamic([1]), tolower(Entities))))
   | where isnotempty(domain)
   | mv-expand domain
@@ -80,5 +81,5 @@ entityMappings:
     fieldMappings:
       - identifier: Url
         columnName: Url
-version: 1.4.5
+version: 1.4.6
 kind: Scheduled