Forum Discussion

Reddy585's avatar
Reddy585
Copper Contributor
Dec 28, 2020

Block user in Onprem NVA

I am looking for a playbook which block the user identity in on-premises Network Virtual Appliance
GaryBushey's avatar
GaryBushey
Bronze Contributor
Dec 28, 2020

Reddy585 Without knowing what NVA you are using it would be very difficult to point you in the correct direction.   With that being said, take a look at the listing of playbooks in the Azure Sentinel GitHub repository

 

https://github.com/Azure/Azure-Sentinel

  • Reddy585's avatar
    Reddy585
    Copper Contributor
    Dec 28, 2020

    GaryBusheyCan we block user in onprem Active Directory/ onprem Firewall using Playbook?

    • GaryBushey's avatar
      GaryBushey
      Bronze Contributor
      Dec 28, 2020

      Reddy585 I know you can block a user via PowerShell and you can run a PowerShell script via a Playbook but I am not sure if you can use that PowerShell command in a Playbook.  Other than that I do not know if it is possible.

      • Reddy585's avatar
        Reddy585
        Copper Contributor
        Dec 28, 2020
        Thank you.

Resources