Azure-Sentinel/Playbooks/Sentinel-Incident-Enrich-Ri...
9b 8322f25197 Updated RiskIQ playbooks. 2021-04-09 08:32:54 -04:00
..
azuredeploy.json Updated RiskIQ playbooks. 2021-04-09 08:32:54 -04:00
readme.md Updated RiskIQ playbooks. 2021-04-09 08:32:54 -04:00

readme.md

Sentinel-Incident-Enrich-RiskIQ-Reputation-Summary-IP

author: Brandon Dixon, RiskIQ

This playbook uses the RiskIQ PassiveTotal connector to automatically enrich incidents generated by Azure Sentinel. You need a valid community or enterprise in order to use the connector and playbook. To learn more about the service and request a trial key, register for free or see the API documentation.