Whisper Security - Get BGP History

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Microsoft Sentinel incident trigger playbook that extracts IP entities from an incident, posts an immediate acknowledgment comment, then calls the Whisper Security whisper.history(ip) API for BGP routing history with a PT90S timeout. Results are posted as an incident comment with BGP origin, prefix, and visibility data.

Attribute Value
Type Playbook
Solution Whisper
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 0 4
keyvault Managed 0 1
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Entities_-_Get_IPs post /entities/ip
Add_Acknowledgment_Comment post /Incidents/Comment
Add_Incident_Comment_Success post /Incidents/Comment
Add_Incident_Comment_Error post /Incidents/Comment

keyvault (Managed)

Action Method Endpoint Other
Get_API_Key get /secrets/@{encodeURIComponent(last(split(parameters('keyVaultSecretUri'), '/')))}/value

http (Built-in)

Action Method Endpoint Other
Call_Whisper_History_IP POST https://graph.whisper.security/api/query

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Whisper