Get-MDEStatistics

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 2 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 6
wdatp Managed 1 3
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Alert_-_Get_incident get /Incidents/subscriptions/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/resourceGroups/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])}/workspaces/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/alerts/@{encodeURIComponent(triggerBody()?['SystemAlertId'])} —
Entities_-_Get_FileHashes post /entities/filehash —
Entities_-_Get_IPs post /entities/ip —
Add_comment_to_incident_(V3) post /Incidents/Comment —
Add_comment_to_incident_(V3)_3 post /Incidents/Comment —
Add_comment_to_incident_(V3)_2 post /Incidents/Comment —

wdatp (Managed)

Action Method Endpoint Other
Ips_-_Get_the_statistics_for_the_given_ip_address get /api/ips/@{encodeURIComponent(items('For_each')?['Address'])}/stats —
Domains_-_Get_the_statistics_for_the_given_domain_name get /api/domains/@{encodeURIComponent(items('For_each_2')?['DnsDomain'])}/stats —
Files_-_Get_the_statistics_for_the_given_file get /api/files/@{encodeURIComponent(items('For_each_3')?['Value'])}/stats —

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks