Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


author: Dennis Pike

Attribute Value
Type Playbook
Solution GitHub Only
Source View on GitHub

Logic App Connectors

This playbook uses 4 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azureloganalyticsdatacollector Managed 1 1
azuresentinel Managed 1 4
wdatp Managed 1 1
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

azureloganalyticsdatacollector (Managed)

Action Method Endpoint Other
Send_Data post /api/logs

azuresentinel (Managed)

Action Method Endpoint Other
Alert_-_Get_incident get /Incidents/subscriptions/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/resourceGroups/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])}/workspaces/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/alerts/@{encodeURIComponent(triggerBody()?['SystemAlertId'])}
Entities_-_Get_Hosts post /entities/host
Add_comment_to_incident_(V3)_3 post /Incidents/Comment
Add_comment_to_incident_(V3)_4 post /Incidents/Comment

wdatp (Managed)

Action Method Endpoint Other
Machines_-_Get_single_machine get /api/machines/@{encodeURIComponent(items('For_each')?['HostName'])}

http (Built-in)

Action Method Endpoint Other
HTTP POST https://api.security.microsoft.com/api/advancedHunting/run

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks