Whisper Security - Explain ASN
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Content Index
Microsoft Sentinel incident trigger playbook that extracts ASN references from incident entities, calls the Whisper Security explain() API with the AS-prefixed number for threat assessment, and adds the results as an incident comment with threat score, level, flags, and explanation.
Logic App Connectors
This playbook uses 3 Logic App connectors / built-in actions:
Action parameters (URLs, paths, function IDs)
| Action |
Method |
Endpoint |
Other |
| Add_Incident_Comment_Success |
post |
/Incidents/Comment |
— |
| Add_Incident_Comment_Error |
post |
/Incidents/Comment |
— |
| Action |
Method |
Endpoint |
Other |
| Get_API_Key |
get |
/secrets/@{encodeURIComponent(last(split(parameters('keyVaultSecretUri'), '/')))}/value |
— |
http (Built-in)
| Action |
Method |
Endpoint |
Other |
| Call_Whisper_Explain_ASN |
POST |
https://graph.whisper.security/api/query |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Playbooks · Back to Whisper