Whisper Security - Check ASN Reputation
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Content Index
Microsoft Sentinel incident trigger playbook that extracts IP entities from an incident, determines ASN context, and calls the Whisper Security explain(asn) API for ASN reputation assessment. Results are posted as an incident comment with reputation score, level, max/avg threat scores, and prefix count.
Logic App Connectors
This playbook uses 3 Logic App connectors / built-in actions:
Action parameters (URLs, paths, function IDs)
| Action |
Method |
Endpoint |
Other |
| Entities_-_Get_IPs |
post |
/entities/ip |
— |
| Add_Incident_Comment_Success |
post |
/Incidents/Comment |
— |
| Add_Incident_Comment_Error |
post |
/Incidents/Comment |
— |
| Action |
Method |
Endpoint |
Other |
| Get_API_Key |
get |
/secrets/@{encodeURIComponent(last(split(parameters('keyVaultSecretUri'), '/')))}/value |
— |
http (Built-in)
| Action |
Method |
Endpoint |
Other |
| Resolve_IP_Infrastructure |
POST |
https://graph.whisper.security/api/query |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Playbooks · Back to Whisper