There is a command group 'az_sentinel_bookmark'. This group of commands could 'manage bookmark with sentinel'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_sentinel_bookmark_create'.The syntax is: az sentinel bookmark create --bookmark-id
                            --resource-group
                            --workspace-name
                            [--created]
                            [--created-by]
                            [--display-name]
                            [--entity-mappings]
                            [--etag]
                            [--event-time]
                            [--incident-info]
                            [--labels]
                            [--notes]
                            [--query-content]
                            [--query-end-time]
                            [--query-result]
                            [--query-start-time]
                            [--tactics]
                            [--techniques]
                            [--updated]
                            [--updated-by]. The parameter '--bookmark-id --name -n' is required. It is used to id of bookmark.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--workspace-name -w' is required. It is used to the name of the workspace.. The parameter '--created' is optional. the time the bookmark was created.. The parameter '--created-by' is optional. describes a user that created the bookmark  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--display-name' is optional. the display name of the bookmark.. The parameter '--entity-mappings' is optional. describes the entity mappings of the bookmark  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--etag' is optional. etag of the azure resource.. The parameter '--event-time' is optional. the bookmark event time.. The parameter '--incident-info' is optional. describes an incident that relates to bookmark  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--labels' is optional. list of labels relevant to this bookmark  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--notes' is optional. the notes of the bookmark.. The parameter '--query-content' is optional. the query of the bookmark.. The parameter '--query-end-time' is optional. the end time for the query.. The parameter '--query-result' is optional. the query result of the bookmark.. The parameter '--query-start-time' is optional. the start time for the query.. The parameter '--tactics' is optional. a list of relevant mitre attacks  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--techniques' is optional. a list of relevant mitre techniques  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--updated' is optional. the last time the bookmark was updated.. The parameter '--updated-by' is optional. describes a user that updated the bookmark  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 