Azure-Sentinel/Playbooks/Enrich-SentinelIncident-Ris...
9b d523cd6f6d Officially tested the deployment process end-to-end. 2020-06-18 09:59:44 -04:00
..
azuredeploy.json Officially tested the deployment process end-to-end. 2020-06-18 09:59:44 -04:00
readme.md Oversight on the README format for the deploy to Azure process. 2020-06-18 09:37:45 -04:00

readme.md

Enrich-SentinelIncident-RiskIQ-Host-WHOIS

author: Brandon Dixon, RiskIQ

This playbook uses the RiskIQ Intelligence connector to automatically enrich incidents generated by Sentinel. You need a valid subscription in order to use the connector and playbook. To learn more about the service and request a trial key, see the API documentation.