Azure-Sentinel/Playbooks/Get-ASCRecommendations

Get-ASCRecommendations

author: Nicholas DiCola

This playbook will take each Host entity and If its an Azure Resource, query ASC API to get any ASC recommendations. It will add a tag and comment if any unhealthy recommendations are found for the resource.

NOTE: This playbook uses a managed identity to access the API. You will need to add the playbook to the subscriptions or management group with Security Reader Role