Azure Security Center

The alerts generated in ASC often stop short of giving enough details to be useful. For example, one alert indicated an error occurred while handling some malware, but it does not indicate any details of the error. Another example, the alert message was, The system process SVCHOST was observed running in an abnormal context, but it's not clear as to what abnormal context is.

There doesn't appear to be a way to annotate alerts. You can mark an alert as dismissed, but you cannot add a note to indicate whether it was found to be false positive or not.