Forum Discussion
Entity playbook in XDR
Hello All! In my Logic Apps Sentinel automations I often use the entity trigger to run some workflows. Some time ago there was information, that Sentinel will be moved to the Microsoft XDR, some of ...
Yes, he has, in the XDR and Entra context. But I have some automations on the entity level that sends the entity to blocking on some third party systems and from XDR I can't do it. And I don't want to grab all the entities from incident or alert, because I could block something that shouldn't be blocked.