Release

AzSentinel/Public/New-AzSentinelAlertRule.ps1

@@ -190,6 +190,10 @@ function New-AzSentinelAlertRule {
 
         try {
             $content = Get-AzSentinelAlertRule @arguments -RuleName $DisplayName -ErrorAction Stop
+
+            if ($content.count -gt 1) {
+                Write-Error "Multiple Rules with the name: '$($DisplayName)' found on workspace: '$($WorkspaceName)' "
+            }
         }
         catch {
             Write-Error $_.Exception.Message

AzSentinel/enums/GroupByEntities.ps1

@@ -1,7 +1,21 @@
 enum GroupByEntities {
     Account
-    Ip
     Host
-    Url
+    IP
+    Malware
+    File
+    Process
+    CloudApplication
+    DNS
+    AzureResource
     FileHash
+    RegistryKey
+    RegistryValue
+    SecurityGroup
+    URL
+    IoTDevice
+    Mailbox
+    MailCluster
+    MailMessage
+    SubmissionMail
 }