Recent Blog ArticlesMost RecentMost LikesCreate Tasks Repository in Microsoft Sentinel In this blog, we will demonstrate how utilization of watchlists, automation rules, and playbooks can be used as tasks repository that will assign tasks based on incident title on incident creation. Using Microsoft Teams Adaptive Cards to enhance incident response in Microsoft Sentinel With the Microsoft Teams Logic App connector, we can utilize Adaptive Cards to send notifications to Teams and/or ask for feedback to act on a Microsoft Sentinel incident. The example we will be u...Re: Update Microsoft Sentinel VIP Users Watchlist from Azure AD group using playbooks Hi Gary Long , thanks for feedback. 1. If connection is authenticated and authorized already, no need to do it again. If not, then you need to perform one of the actions. 2. Yes - and it can be e...Re: New watchlist actions available for watchlist automation using Microsoft Sentinel SOAR Hi jakeiscool1805 - can you try to add "source": "playbook" into watchlist body? Re: Using Microsoft Teams Adaptive Cards to enhance incident response in Microsoft Sentinel jpot87 - thanks for heads up - links are fixed. Microsoft Sentinel Automation Tips & Tricks – Part 1: Automation rules It this multi-series blog posts, we will cover tips and trick when using Microsoft Sentinel Automation. In part one, we will cover Automation rules. Microsoft Sentinel Automation Tips & Tricks – Part 2: Playbooks This blog is part of a multi-series Part 1: Automation rules Part 2: Playbooks – this blog Part 3: Send email notification options Part 4: Dynamic content and expressions – coming soon ...Microsoft Sentinel Automation Tips & Tricks – Part 3: Send email notification options Microsoft Sentinel Automation Tips & Tricks – Part 3 will cover different options to send an email notification from Microsoft Sentinel using playbooks. Re: Become a Microsoft Sentinel Automation Ninja! Hi Iheanyi - thanks for reporting. Link fixed now. Become a Microsoft Sentinel Automation Ninja! The number of security incidents and information related to them are rising daily. Traditional tools and methods aren’t enough to process all the data and to respond to all the incidents. That is whe...
MicrosoftMicrosoftMicrosoftMicrosoft
