Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
Azure-Sentinel/Playbooks/Post-Message-Teams
История
Lior Tamir 41b497012a Last update time equal to pp start time 
All templates that appear from day 1 will be affected.
Next templates will be uploaded with new times of upload
 		2021-07-15 18:37:10 +03:00
..
alert-trigger Last update time equal to pp start time 2021-07-15 18:37:10 +03:00
images Added screenshots 2021-07-08 14:14:03 +01:00
incident-trigger Last update time equal to pp start time 2021-07-15 18:37:10 +03:00
azuredeploy.json Fixing ARM Template 2020-07-21 16:35:30 -04:00
readme.md Added screenshots 2021-07-08 14:11:19 +01:00

readme.md

Post-Message-Teams

Author: Yaniv Shasha

This playbook will post a message in a Microsoft Teams channel when an Alert is created in Azure Sentinel

Prerequisites

MS teams Account that allow to post messages

Quick Deployment

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Learn more about automation rules

Deploy to Azure Deploy to Azure Gov

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will rune when an alert is created.

Deploy to Azure Deploy to Azure Gov

Screenshots

Incident Trigger Incident TriggerL Incident TriggerD

Alert Trigger Alert Trigger

Microsoft Teams Teams