AS-Edgescan-Integration-Vulnerabilities

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook will run daily and ingest vulnerability records created in Edgescan in the last two days. If these records are not in the Microsoft Sentinel Edgescan_Vulnerabilities_CL custom log, they will be added.

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
[parameters('PlaybookName')]_CL ? ?

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azureloganalyticsdatacollector Managed 1 1
keyvault Managed 1 1
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

azureloganalyticsdatacollector (Managed)

Action Method Endpoint Other
Send_Data post /api/logs

keyvault (Managed)

Action Method Endpoint Other
Get_Secret_API_Token get [concat('/secrets/@{encodeURIComponent(''', parameters('KeyVaultSecretName'), ''')}/value')]

http (Built-in)

Action Method Endpoint Other
Send_HTTP_GET_Vulnerabilities_Request GET [concat('https://', parameters('EdgescanURL'), '/api/v1/vulnerabilities.json')]

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks