История

Lior Tamir 1b2f7b6ac2 Merge branch 'master' into 1506-logicapp-fix		2021-06-20 10:07:35 +03:00
..
azuredeploy.json	Update azuredeploy.json	2020-04-14 22:57:47 +03:00
readme.md	Merge branch 'master' into 1506-logicapp-fix	2021-06-20 10:07:35 +03:00

readme.md

Enrich-SentinelIncident-MDATPTVM

author: Yaniv Shasha

This playbook will enrich the Client machine that is part of sentinel incident with thread vulnerabilities data (TVM) with CVE that their score is grater then 7.5. Also it automatically add this information to the incident as comments and change the incident severity to High.
This logic app use Oauth2 to authenticate against MDATP API. Learn more about authenticating with Oauth2 in Logic Apps

Prerequisite:

Create AAD app and give the Permissions based on this article

readme.md

Enrich-SentinelIncident-MDATPTVM

Prerequisite:

Deploy to Azure