Playbook (Logic App) - trigger - When Azure Sentinel incident creation rule was triggered

erlendoyen 

Private previews tend to move pretty fast with Sentinel. Worth the wait on the new activity.

If you need something sooner you can schedule a query against the incidents table using the "Run query and list results" activity.  https://azurecloudai.blog/2020/09/23/sentinel-email-notification-logic-app/