[BUG] MDE - Links to entities are broken

[piaudonn]

When the MDE module generates a link to anentity, it adds a trailing backslash. It used to work originally, but now, it makes the browsing experience navigating to the main Defender portal instead of the entity.

SentinelAutomationModules/Modules/MDEModule/azuredeploy.json

Line 148 in 5c6d24d

"value": "@{if(not(equals(item()['UserPrincipalName'], '')), concat('<a href=\"https://security.microsoft.com/user/?aad=',item()['UserId'],'&tid=',body('Parse_JSON')?['TenantId'],'\" target=\"_blank\">',item()['UserPrincipalName'],'</a>'), item()['UserSid'])} @{if(equals(length(items('For_each_DetailedResultsAccounts')['UserDevices']),0),' - No devices found',body('Create_table_for_Machines')[0])} <br />"

SentinelAutomationModules/Modules/MDEModule/azuredeploy.json

Line 920 in 5c6d24d

"value": "<a href=\"https://security.microsoft.com/machines/@{item()?['id']}?tid=@{body('Parse_JSON')?['TenantId']}\" target=\"_blank\">@{item()?['id']}</a>"

Fix should be :

... https://security.microsoft.com/user?aad= ...
... https://security.microsoft.com/machine?aad= ...

Thanks to Damon for reporting it.

[piaudonn]

Actually, I don't think the machine needs a fix. Only the users. Needs to confirm.

[piaudonn]

Addressed.