Azure-Sentinel/Playbooks/Enrich-Sentinel-Incident-HY.../readme.md

1.2 KiB

Enrich-Sentinel-Incident-HYAS-Insight-IP-Passive-DNS

author: Paul van Gool, HYAS Infosec

This playbook uses the HYAS Insight connector to automatically enrich incidents generated by Sentinel with geolocation information. You need a valid subscription in order to use the connector and playbook. Learn more about the integration via the connector documentation or visit HYAS Insight to request a trial key.