Getting started with Microsoft Sentinel Automation (2023 edition)

In this video, we'll dive into the world of Microsoft Sentinel Automation and explore how it can be used to streamline incident management and response. Specifically, we'll focus on two powerful automation features: Automation Rules and Playbooks (logic apps).
With Automation Rules, you'll learn how to quickly filter out non-actionable incidents and focus on those that require attention. We'll walk through the process of creating and customizing rules to fit your specific needs, and explore how to automate the enrichment of incidents with additional data.
Next, we'll explore Playbooks (logic apps), which enable you to execute a variety of actions automatically in response to incidents. You'll learn how to create and customize Playbooks to fit your organization's specific needs, and see examples of how they can be used to automatically mitigate incidents and resolve security threats.
Whether you're a security analyst looking to streamline your incident management process, or an IT professional interested in automating cyber security, this video will provide you with a comprehensive introduction to Microsoft Sentinel Automation.
#microsoftsentinel #cybersecurity #automation

[@sharpshorts4254]

mate your content is absolute fire!!!!! thank you so much for putting this together. It is a really great way to learn

[@AzureVlog]

Thanks! Great you liked the content!

[@adventuresofa9jaguy322]

need more of this pls! but how do you give the permissions to the RG? do you do that under logic apps role assignment and scope to the RG of the workspace?

[@microsoftsecuritynl3077]

Nice work Jeroen

[@user-dn6uf9vd2f]

Sounds like arnold schwarzenegger singing sweet cyber security songs to my ears, thanks!

[@chitchatvn5208]

Thanks a lot for your work and sharing. Your video was also very informative and high quality created.

[@getmethere9425]

Thanks a ton for your explanation.

[@ngophuthanh]

Very helpful. Thank you for sharing.

[@user-ie8tc1hl1e]

Can you please create VirusTotal Integration with Azure Sentinel?

[@anusree2950]

Hey , i am getting an error while saving the logic app. I have added all the permission in the system assigned managed identity, microsoft sentinel contributor