Sentinel Smart Copy
Extension Actions
Adds a copy button to KQL boxes in the Sentinel Content Hub.
Stop struggling to select and copy KQL code from small preview windows. Sentinel Smart Copy adds a dedicated "Copy KQL" button directly into the Microsoft Sentinel and Microsoft Defender Content Hub interfaces, allowing you to grab query logic instantly.
Why use this? As Security Professionals, we constantly pull analytic rules from the Content Hub to tune, test, and validate in Log Analytics. The native UI makes it difficult to select raw code without grabbing line numbers, whitespace, or surrounding HTML. This extension solves that friction point with a single click.
Key Features:
One-Click Extraction: Instantly copies the raw KQL query to your clipboard.
Smart Formatting: Automatically sanitizes the output, removing HTML artifacts and preserving proper indentation for VS Code or Log Analytics.
Multi-Portal Support: Works seamlessly on both portal.azure.com (Sentinel) and security.microsoft.com (Defender XDR).
Visual Feedback: Simple "Copied!" confirmation ensures you have the code ready to paste.
Secure by Design: Runs entirely locally in your browser. No data is collected, stored, or transmitted.
Privacy Policy: This extension does not collect, store, or transmit any user data. It requires permission to access clipboardWrite solely to perform the copy function initiated by the user.