Pure Storage Protection Group Snapshot

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


This playbook gets triggered when a Microsoft Sentinel Incident created for suspicious activity and it takes protection group snapshot of specific protection groups listed in key vault.

Attribute Value
Type Playbook
Solution Pure Storage
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 1
keyvault Managed 1 2
http Built-in 0 4
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Entities_-_Get_IPs post /entities/ip —

keyvault (Managed)

Action Method Endpoint Other
Get_secret get /secrets/@{encodeURIComponent(replace(items('IP_Loop')?['Address'], '.', '-'))}/value —
Get_PG_list get /secrets/@{encodeURIComponent(concat(replace(items('IP_Loop')?['Address'], '.', '-'),'-protection-groups'))}/value —

http (Built-in)

Action Method Endpoint Other
Fetching_API_version GET https://@{items('IP_Loop')?['Address']}/api/api_version —
Retreiving_auth_token POST https://@{items('IP_Loop')?['Address']}/api/@{last(body('Fetching_API_version')?['version'])}/login —
Protection_Group_Snapshot_ POST https://@{items('IP_Loop')?['Address']}/api/@{last(body('Fetching_API_version')?['version'])}/protection-group-snapshots —
Logout POST https://@{items('IP_Loop')?['Address']}/api/@{last(body('Fetching_API_version')?['version'])}/logout —

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks · Back to Pure Storage