Skip to content

Added the new action List Incident Entities V2 #4676

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 23, 2024
Merged

Added the new action List Incident Entities V2 #4676

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
742a289
added the new action
Oct 22, 2024
8bd537b
Updates from review
jpipkin1 Oct 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions ...form-services/automation-service/app-central/integrations/microsoft-sentinel.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/microsoft-sentinel.png')} alt="microsoft-sentinel" width="100"/>

***Version: 1.4
Updated: Oct 14, 2024***
***Version: 1.5
Updated: Oct 22, 2024***

Microsoft Sentinel is a cloud-native security information and event manager (SIEM) platform that uses built-in AI to help analyze large volumes of data across an enterprise.

Expand All @@ -18,6 +18,7 @@ Microsoft Sentinel is a cloud-native security information and event manager (SIE
* **List Incidents** (*Enrichment*) - Get a list of all incidents.
* **Search Into Sentinel Events** (*Enrichment*) - Query into a Sentinel event.
* **List Incident Entities** (*Enrichment*) - Get all incident related entities.
* **List Incident Entities V2** (*Enrichment*) - Get all incident related entities and enrich Sentinel entities with additional information to Cloud SOAR entities.
* **Add Incident Comment** (*Containment*) - Add a new incident comment.
* **Delete Incident** (*Containment*) - Delete an incident.
* **Update Incident** (*Containment*) - Update an incident.
Expand All @@ -37,4 +38,8 @@ Microsoft Sentinel is a cloud-native security information and event manager (SIE
+ renamed action Incidents Daemon Sentinel to Microsoft Sentinel Incidents Daemon
+ added new action List Incident Alerts
* October 14, 2024 (v1.4)
+ Updated the integration by adding two new fields (**API Root** and **Login Endpoint**) to the configuration
+ Updated the integration by adding two new fields (**API Root** and **Login Endpoint**) to the configuration
+ October 22, 2024 (v1.5)
+ Added new action **List Incident Entities V2**
+ Updated the integration by adding a new fields (**Cloud SOAR URL API URL**, **Access ID** , **Access Key**) to the configuration

Loading