Blog Post

Microsoft Sentinel Blog
10 MIN READ

Understanding API connections for your Microsoft Sentinel Playbooks

MariaSousaValadas's avatar
MariaSousaValadas
Icon for Microsoft rankMicrosoft
Jul 29, 2021
In addition to being a Security Information and Event Management (SIEM) tool, Microsoft Sentinel is a Security Orchestration, Automation, and Response (SOAR) platform. Automation takes a few differen...
Updated Nov 03, 2021
Version 2.0
Sreedhar_Ande's avatar
Sreedhar_Ande
Icon for Microsoft rankMicrosoft
Mar 15, 2022

SocInABox 

We also introduced a new API endpoint for triggering a playbook. To use it you will need the incident and the playbook ARM ID. You can use it from any HTTP client as part of your scripts, and soon from Microsoft Sentinel PowerShell and CLI. This endpoint is available in our latest API version, with the header “2021-10-01-preview”.