Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Publisher | Microsoft Corporation |
| Support Tier | Microsoft |
| Support Link | https://support.microsoft.com |
| Categories | domains |
| Version | 3.0.0 |
| Author | Microsoft - support@microsoft.com |
| First Published | 2023-05-22 |
| Solution Folder | Entrust identity as Service |
| Marketplace | Azure Marketplace · Popularity: 🟡 Low (11%) |
Entrust offers Cloud-based identity and access management (IAM) solution with multi-factor authentication (MFA), credential-based password less access, and single sign-on (SSO). Integrating it with Microsoft Sentinel will give the ability to enrich incidents and mangae user entity access as part of incident remediation process.
This solution does not include data connectors.
This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.
This solution includes 5 content item(s):
| Content Type | Count |
|---|---|
| Playbooks | 5 |
| Name | Description | Tables Used |
|---|---|---|
| Block Risky/Compromised User From Entrust | This playbook Block the risky user and update the status in comments section of triggered incident s... | - |
| Fetch IP Details From Entrust | This playbook provides the IP details in comments section of triggered incident so that SOC analysts... | - |
| Fetch IP Details From Entrust - Entity | This playbook provides the IP details of user authentication and management activity in comments sec... | - |
| Fetch User Details From Entrust | This playbook provides the user essential details in comments section of triggered incident so that ... | - |
| Fetch User Details From Entrust - Entity | This playbook provides the user essential details in comments section of incident so that SOC analys... | - |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊