Forum Discussion
Looking to Automate "Create team(preview)"
Hi I have recently been making use of the "Create team (preview)" feature within the actions tab when looking at an incident. I am now trying to automate this so that this is ran every time an incident is created.
I have looked in automation rules and the only option I can think is to run a playbook however it doesn't look like this feature is classed as a playbook. Looking at the image below I was hoping that the create team action would be avaible.
Looking to see if anyone knows how to do this?
Cheers!
- Found this recently, might be useful:
https://learn.microsoft.com/en-us/rest/api/securityinsights/preview/incidents/create-team?tabs=HTTP In my mind this was for certain scenarios not 'all" as per...helpful when used as a dedicated conference bridge for high-severity, ongoing incidents." source: Collaborate in Microsoft Teams with a Microsoft Sentinel incident team | Microsoft Learn
There is a "post message Teams" Playbook to build this yourself?
I did a quick look at the (preview) Rest API section, and nothing is listed there either Microsoft Sentinel REST API | Microsoft Learn
