Forum Discussion
joshzan
Mar 10, 2020Copper Contributor
"Block user in Azure AD" playbook action
Hi, I am creating some playbooks and would like to include an action where the user involved in the alert it blocked. I thought this was possible using Sentinel playbooks based on the image in thi...
Thijs Lecomte
Mar 10, 2020Bronze Contributor
Hi
Have you seen this play book?
https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Block-AADUser
YOu can deploy it in your own environment
GaryBushey
Mar 10, 2020Bronze Contributor
Thijs Lecomte Was there supposed to be a link or attachment in your reply?
- Thijs LecomteMar 10, 2020Bronze ContributorYes indeed. Rod_Trent got the right one 🙂