I am required to search for a specific query, which is stored in a Sentinel workbook Initially, I opened each workbook manually, clicked on edit and expanded all graphs to view the associated query. However, this process is time-consuming, particularly…
Within Azure Sentinel, I have several automation rules set up that respond with various playbooks/logic apps. I want to be notified or know how to search the logs to find all the failed runs failed actions (by playbooks/logicapps) and when…
I'm trying to get all Watchlist Items for a given watchlist using the connector ( which still in preview). I have 150 elements in my Watchlist, I'm getting the first 100 items correctly but I'm not getting the 50 last…
I'm currently developing locally an Azure function that communicates with Microsoft Sentinel, in order to fetch the alert rules from it, and more specifically their respective querys : credentials = AzureCliCredential() alert_rules_operations = SecurityInsights(credentials, SUBSCRIPTION_ID).alert_rules list_alert_rules = alert_rules_operations.list(resource_group_name=os.getenv('RESOURCE_GROUP_NAME'), workspace_name=os.getenv('WORKSPACE_NAME')) The…