This commit is contained in:
Brian Delaney 2024-06-12 22:35:44 -04:00 коммит произвёл GitHub
Родитель a865d14d53
Коммит 33c5b9566c
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: B5690EEEBB952194
1 изменённых файлов: 2 добавлений и 1 удалений

Просмотреть файл

@ -9,8 +9,9 @@
"The incident tasks are enumerated to determine the completion status, and if incomplete will cause the reopening of the incident."
],
"prerequisites": [
"After deploying the the playbook you will need to grant the playbook's Managed Identity \n\n **Microsoft Sentinel Responder** \n\n (or greater) access to the resource group where Microsoft Sentinel is installed. This gives the Managed Identity the necessary permissions to add comments, tags, and change incident status. In addition an automation rule can be created to run this playbook on incident closure."
"After deploying the the playbook you will need to grant the playbook Managed Identity \n\n **Microsoft Sentinel Responder** \n\n (or greater) access to the resource group where Microsoft Sentinel is installed. This gives the Managed Identity the necessary permissions to add comments, tags, and change incident status. In addition an automation rule can be created to run this playbook on incident closure."
],
"postDeployment": ["The Microsoft Sentinel Responder role must be assigned to the playbook managed identity on the Microsoft Sentinel resource group"],
"lastUpdateTime": "2024-06-10T10:00:00.000Z",
"entities": [],
"tags": [