Forum Discussion
Entity playbook in XDR
Hello All! In my Logic Apps Sentinel automations I often use the entity trigger to run some workflows. Some time ago there was information, that Sentinel will be moved to the Microsoft XDR, some of ...
Yes, he has, in the context of the XDR or Entra. But I have some automations on the entity level to automate blocking it in some third party systems, and I can't do it from the XDR. And I don't want to get all the entities from one incident or alert to not block something that shouldn't be blocked.