Blog Post

Microsoft Sentinel Blog
4 MIN READ

What's New: Microsoft Sentinel Watchlist Support for ARM Templates!

Matt_Lowe's avatar
Matt_Lowe
Icon for Microsoft rankMicrosoft
Jun 16, 2021
To add to the list of exciting announcements for Microsoft Sentinel, we are happy to announce that Watchlists now support ARM templates! Moving forward, users will be able to deploy Watchlists via AR...
Updated Nov 02, 2021
Version 4.0
Matt_Lowe's avatar
Icon for Microsoft rankMicrosoft
Joined March 02, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

ErikOppedijk's avatar
ErikOppedijk
MCT
Nov 17, 2021

I've tried this and it works, however when deploying this automatically, the watchlist only gets "additions" and old rows are kept.

 

I'm using the new Sentinel Repositories feature to deploy watchlist, so running a script to first delete them won't work for me