Create Playbook to email Azure Sentinel Incident with proper HTML formatting

preview_player
Показать описание
Playbook to send email to SOC team once an Azure Sentinel Incident has been created.See the customized email body with HTML in he comments section
  1. HardConceptsSimple
Рекомендации по теме
Create Playbook to 0:12:49

Create Playbook to email Azure Sentinel Incident with proper HTML formatting

How to Create 0:11:29

How to Create Microsoft Sentinel Playbook and Trigger Email for Incident Created @prohut

Creating Playbooks / 0:07:57

Creating Playbooks / Logic Apps in Azure Sentinel

Microsoft Sentinel Playbook 0:07:31

Microsoft Sentinel Playbook that Emails you when you've been hacked

Incident alert trigger 0:07:14

Incident alert trigger to Email in Azure Sentinel

Getting started with 0:12:29

Getting started with automation rules and playbooks in Microsoft Sentinel

Microsoft Sentinel automation 0:12:14

Microsoft Sentinel automation rules to manage response | Logic Apps | Automation Rules | Playbooks

Azure Alert Basics 0:06:37

Azure Alert Basics

Create Intelligent Futures: 4:00:01

Create Intelligent Futures: Microsoft AI-102 – Developing AI Models in Azure(PART 1)

Microsoft Sentinel-Threat Hunting 0:05:44

Microsoft Sentinel-Threat Hunting

Microsoft Sentinel - 0:02:44

Microsoft Sentinel - Azure OpenAI Incident Response Playbook

New!!! Playbook Templates 0:04:08

New!!! Playbook Templates - Azure Sentinel

What is Microsoft 0:19:19

What is Microsoft Sentinel?||Azure Security Center||Playbook||Data Connector||Custom Alerts||Azure

Export your SOAR 0:12:05

Export your SOAR Playbooks with ease | Microsoft Sentinel in the Field #7

DEMO Azure Logic 0:05:08

DEMO Azure Logic Apps work Azure logic Apps Playbook Designer

How to Configure 0:07:51

How to Configure Security Playbook in Azure Sentinel

Building Microsoft Sentinel 0:45:19

Building Microsoft Sentinel Usecases with automation using playbooks

Creating Your Own 0:04:28

Creating Your Own Cybersecurity Playbook

SC-200-MICROSOFT SECURITY OPERATIONS 0:14:31

SC-200-MICROSOFT SECURITY OPERATIONS ANALYST-LAB 17-HOW TO CREATE PLAYBOOK IN MICROSOFT SENTINEL

Microsoft Loop Explained: 0:13:11

Microsoft Loop Explained: this will change how you work

Microsoft AI Tour 0:01:50

Microsoft AI Tour Event in 2 Minutes: Copilot and Agents

Microsoft Sentinel — 0:07:34

Microsoft Sentinel — Azure OpenAI/ChatGPT Incident Response Playbook | DEMO | Playbook

Logic Apps for 0:50:37

Logic Apps for Everyone - A complete guide for anyone!

Investigating Incidents-Microsoft Sentinel 0:07:24

Investigating Incidents-Microsoft Sentinel

Комментарии
Автор

I got tripped up because the Security Center is now known as Defender for Cloud. Otherwise, great content and thank you for the knowledge.

jamesclifton
Автор

Thank you sir for recording this video and shared your knowledge.❤

avinashkolhe
Автор

Customised Email Body with HTMLas mentioned in the video:

<p>Hello SecurityTeam, </p>
<p>You have an incident from Azure Sentinel. Below is information:</p>

<ul>
<li><strong>Alert
IncidentDescription</li>
Incident Severiity</li>
<li><strong>Incident ID</strong>: IncidentSentinelID</li>
<li><strong>Start Time</strong>: AlertStartTime</li>
<li><strong>Incident URL</strong>: IncidentURL</li>
</ul>

<p>Please review and update incident accordingly.</p>
<p>Azure Sentinel Team</p>

SecurityMadeSimple
Автор

Hi, I have a question. I've created a playbook and everything seems to work except for viewing the Entities. When the mail arrives the entities are empty.
I entered: (Listof entites related to the incident can
but the entities displayed on Sentinel do not appear in e-mail. How can I do? Thank you.

alexanderrose
Автор

I am getting the below error


Please help me fix this.

KallamSivaSaiKumar
Автор

Great video!
It is possible to use a managed account to sent emails? I mean, instead of sending emails from a personal email account (For this case was DPM Service)

axelfloresbeltran
Автор

how would we send the same incident to a event hub so that it can be ingested into a third party SIEM ?

nandpurohit
Автор

Hi Sir,

I followed your video instruction but i'm getting below error message, please guide me how to fix.

natureloverbalu
Автор

The best guide on Sentinel I have seen so far. Thank you brother. How can I contact you via email?

SuperWinning
Автор

Is there a way to apply the email playbook to all analytics rules? - It seems very painful to add email notifications this way to all incidents that may be generated.

jackr