Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
This playbook imports alerts from Recorded Future and stores them in a custom log (RecordedFuturePlaybookAlerts_CL) in the log analytics workspace. To create Microsoft Defender incidents from these alerts, use a Analytics Rule that queries the RecordedFuturePlaybookAlerts_CL table. Direct incident creation via Logic Apps is no longer supported in the unified Microsoft Defender portal.
| Attribute | Value |
|---|---|
| Type | Playbook |
| Solution | Recorded Future |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
RecordedFuturePlaybookAlerts_CL 🔶 |
? | ✓ | ? |
This playbook uses 2 Logic App connectors / built-in actions:
| Connector / Action | Type | Connections | Actions |
|---|---|---|---|
azureloganalyticsdatacollector |
Managed | 1 | 1 |
recordedfuturev2 |
Managed | 1 | 2 |
azureloganalyticsdatacollector (Managed)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Send_Data | post | /api/logs |
— |
recordedfuturev2 (Managed)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Get_Playbook_Alert_by_ID | get | /playbook-alert/@{encodeURIComponent(items('For_each')?['playbook_alert_id'])} |
— |
| Search_Playbook_Alerts | post | /playbook-alert/search |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊