Blog Post

Microsoft Sentinel Blog
4 MIN READ

What’s new: Automate full incident lifecycle with incident update triggers

liortamir's avatar
liortamir
Former Employee
May 31, 2022
Automation tools are an essential capability for the modern SOC to cope with the volume of threats and manage day-to-day tasks. Microsoft Sentinel automation capabilities help security teams transfor...
Updated May 31, 2022
Version 2.0
automation
playbooks
soar
liortamir's avatar
Former Employee
Joined February 07, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Sentinel by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

JoseSebastian's avatar
JoseSebastian
Copper Contributor
Jun 02, 2022

Could 2 Automation Rules feedback each other and be stuck in a loop, because they change one incident from one state to the other and vice versa?