История

liortamirmicrosoft dcc4d6552e Fix Watchlists-InformSubOwner		2020-11-08 18:43:20 +02:00
..
images	Fix Watchlists-InformSubOwner	2020-11-08 18:43:20 +02:00
azuredeploy.json	Fix Watchlists-InformSubOwner	2020-11-08 18:43:20 +02:00
readme.md	Update readme.md	2020-10-22 12:10:36 -07:00

readme.md

Watchlists-InformSubowner-IncidentTrigger

author: Lior Tamir

This playbook levarages Azure Sentinel Watchlists in order to get the relevant subscription owner contact details, and inform about an ASC alert that occured in that subscription. It uses Microsoft Teams and Office 365 Outlook as ways to inform the sub owner.

Note: This playbook utilizes two features currently in Preview.

Azure Sentinel Watchlists
Azure Sentinel Incident Trigger