CybleVisionAlert_Status_Update

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This Logic App updates Cyble alert status and severity based on Microsoft Sentinel incident changes. It supports automatic updates via automation rules and interprets user-applied tags to determine the correct status mapping.

Attribute Value
Type Playbook
Solution Cyble Vision
Source View on GitHub

Logic App Connectors

This playbook uses 2 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 0
http Built-in 0 2
Action parameters (URLs, paths, function IDs)

http (Built-in)

Action Method Endpoint Other
post_comment-copy POST https://bifrost.cyble.ai/engine/api/v1/y/tpi/sentinel/alerts/@{variables('var_alertId')}/comments
update_alert_details PUT https://bifrost.cyble.ai/engine/api/v1/y/tpi/sentinel/alerts

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Cyble Vision