История

Lior Tamir 41b497012a Last update time equal to pp start time All templates that appear from day 1 will be affected. Next templates will be uploaded with new times of upload		2021-07-15 18:37:10 +03:00
..
alert-trigger	Last update time equal to pp start time	2021-07-15 18:37:10 +03:00
incident-trigger	Last update time equal to pp start time	2021-07-15 18:37:10 +03:00
readme.md	Updating Deploy buttons and links part 1	2021-06-16 00:25:40 +00:00

Quick start - create a playbook from scratch with Sentinel triggers

Use this template to quickly create a new playbook which starts with an Azure Sentinel incident or Azure Sentinel alert.

Prerequisites

This playbook is configured to work with Managed Identity for the Azure Sentinel Logic Apps connector steps. After playbook is deployed, assign permissions for this playbook to Azure Sentinel workspace. Learn more

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will rune when an alert is created.