Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Workbooks are interactive dashboards that visualize security data from Microsoft Sentinel. They combine charts, tables, and text to provide insights into your security posture, help monitor key metrics, and support investigation with drill-down capabilities. Learn more
562 workbooks across all Microsoft Sentinel solutions.
Jump to: # | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | Z
Source: 📦 Solution | 📄 Standalone | 🔗 GitHub Only
| Name | Source |
|---|---|
| 1Password | 📦 1Password |
| 1Password | 🔗 GitHub Only |
| 42CrunchAPIProtectionWorkbook | 📦 42Crunch API Protection |
| 42CrunchAPIProtectionWorkbook | 🔗 GitHub Only |
| Name | Source |
|---|---|
| DarktraceWorkbook | 📦 Darktrace |
| Data_Latency_Workbook | 🔗 GitHub Only |
| DataCollectionHealthMonitoring | 🔗 GitHub Only |
| DataminrPulseAlerts | 📦 Dataminr Pulse |
| DCR-Toolkit | 🔗 GitHub Only |
| DefendMetrics | 📦 Egress Defend |
| DelineaWorkbook | 📦 Delinea Secret Server |
| DelineaWorkbook | 🔗 GitHub Only |
| DigitalGuardian | 📦 Digital Guardian Data Loss Prevention |
| DigitalShadows | 📦 Digital Shadows |
| Dns | 📦 Windows Server DNS |
| Dns | 🔗 GitHub Only |
| DNSSolutionWorkbook | 📦 DNS Essentials |
| DoDZeroTrustWorkbook | 🔗 GitHub Only |
| Doppel | 📦 Doppel |
| DORACompliance | 📦 DORA Compliance |
| DPDPCompliance | 📦 DPDP Compliance |
| DSTIMWorkbook | 🔗 GitHub Only |
| DuoSecurity | 🔗 GitHub Only |
| Dynamics365Activity | 📦 Microsoft Business Applications |
| DynamicThreatModeling&Response | 📦 ThreatAnalysis&Response |
| Dynatrace | 📦 Dynatrace |
| Name | Source |
|---|---|
| EatonForeseerHealthAndAccess | 📦 EatonForeseer |
| ESETPROTECT | 📦 ESETPROTECT |
| esetSMCWorkbook | 📦 Eset Security Management Center |
| esetSMCWorkbook | 🔗 GitHub Only |
| EventAnalyzer | 📦 Windows Security Events |
| EventAnalyzer | 🔗 GitHub Only |
| ExchangeCompromiseHunting | 🔗 GitHub Only |
| ExchangeOnline | 📦 Microsoft 365 |
| ExchangeOnline | 🔗 GitHub Only |
| ExtraHopDetectionsOverview | 📦 ExtraHop |
| ExtraHopDetectionSummary | 📦 ExtraHop Reveal(x) |
| ExtraHopDetectionSummary | 🔗 GitHub Only |
| eyeInspectOTSecurityWorkbook | 📦 Forescout eyeInspect for OT Security |
| Name | Source |
|---|---|
| F5BIGIPSystemMetrics | 📦 F5 Big-IP |
| F5BIGIPSystemMetrics | 🔗 GitHub Only |
| F5Networks | 📦 F5 Big-IP |
| F5Networks | 🔗 GitHub Only |
| FlareSystemsFireworkOverview | 📦 Flare |
| ForcepointCASB | 📦 Forcepoint CASB |
| ForcepointCASB | 🔗 GitHub Only |
| ForcepointCloudSecuirtyGateway | 📦 Forcepoint CSG |
| ForcepointCloudSecuirtyGatewayworkbook | 🔗 GitHub Only |
| ForcepointDLP | 📦 Forcepoint DLP |
| ForcepointDLP | 🔗 GitHub Only |
| ForcepointNGFW | 📦 Forcepoint NGFW |
| ForcepointNGFW | 🔗 GitHub Only |
| ForcepointNGFWAdvanced | 📦 Forcepoint NGFW |
| ForcepointNGFWAdvanced | 🔗 GitHub Only |
| ForescoutHostPropertyMonitorWorkbook | 📦 ForescoutHostPropertyMonitor |
| Fortigate | 📦 Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel |
| Fortigate | 🔗 GitHub Only |
| FortinetFortiNdrCloudWorkbook | 📦 Fortinet FortiNDR Cloud |
| Fortiweb-workbook | 📦 Fortinet FortiWeb Cloud WAF-as-a-Service connector for Microsoft Sentinel |
| Name | Source |
|---|---|
| HIPAACompliance | 📦 HIPAA Compliance |
| Name | Source |
|---|---|
| JamfProtectDashboard | 📦 Jamf Protect |
| Name | Source |
|---|---|
| KeeperSecurityDashboard | 📦 Keeper Security |
| KeeperSecurityDashboard | 🔗 GitHub Only |
| KnowBe4DefendMetrics | 📦 KnowBe4 Defend |
| Name | Source |
|---|---|
| Office365 | 📦 Microsoft 365 |
| Office365 | 🔗 GitHub Only |
| OktaSingleSignOn | 📦 Okta Single Sign-On |
| OnapsisAlarmsOverview | 📦 Onapsis Platform |
| OnapsisAlarmsOverview | 🔗 GitHub Only |
| OneIdentity | 📦 OneIdentity |
| OneIdentity | 🔗 GitHub Only |
| OptimizationWorkbook | 🔗 GitHub Only |
| OracleCloudInfrastructureOCI | 📦 Oracle Cloud Infrastructure |
| OracleDatabaseAudit | 📦 OracleDatabaseAudit |
| OracleWorkbook | 📦 OracleWebLogicServer |
| OrcaAlerts | 📦 Orca Security Alerts |
| OrcaAlerts | 🔗 GitHub Only |
| Name | Source |
|---|---|
| PaloAltoCDL | 📦 PaloAltoCDL |
| PaloAltoNetworkThreat | 📦 PaloAlto-PAN-OS |
| PaloAltoNetworkThreat | 🔗 GitHub Only |
| PaloAltoOverview | 📦 PaloAlto-PAN-OS |
| PaloAltoOverview | 🔗 GitHub Only |
| PaloAltoPrismaCloudOverview | 📦 PaloAltoPrismaCloud |
| PaloAltoXDR ⚠️ | 📦 Palo Alto - XDR (Cortex) |
| PCIDSSCompliance | 📦 PCI DSS Compliance |
| Perimeter81OverviewWorkbook | 📦 Perimeter 81 |
| Perimeter81OverviewWorkbook | 🔗 GitHub Only |
| pfsense | 🔗 GitHub Only |
| PhishingAnalysis | 🔗 GitHub Only |
| PingFederate | 📦 PingFederate |
| PlaybookHealth | 🔗 GitHub Only |
| PrancerSentinelAnalytics ⚠️ | 📦 Prancer PenSuiteAI Integration |
| PrancerSentinelAnalytics | 🔗 GitHub Only |
| PreventWorkbook | 📦 Egress Iris |
| ProofpointPOD | 📦 Proofpoint On demand(POD) Email Security |
| ProofpointPOD | 🔗 GitHub Only |
| ProofpointTAP | 📦 ProofPointTap |
| ProofpointTAP | 🔗 GitHub Only |
| ProofPointThreatDashboard | 🔗 GitHub Only |
| PulseConnectSecure | 📦 Pulse Connect Secure |
| PulseConnectSecure | 🔗 GitHub Only |
| Name | Source |
|---|---|
| QscoutDashboards | 📦 Quokka |
| QualysVM | 🔗 GitHub Only |
| QualysVMv2 | 📦 QualysVM |
| QualysVMv2 | 🔗 GitHub Only |
| Name | Source |
|---|---|
| Ubiquiti | 📦 Ubiquiti UniFi |
| UEBABehaviorsAnalysisWorkbook | 📦 UEBA Essentials |
| UnifiSG | 🔗 GitHub Only |
| UnifiSGNetflow | 🔗 GitHub Only |
| UpdateSOCMaturityScore | 📦 SOC-Process-Framework |
| usecasemapper | 🔗 GitHub Only |
| User_Analytics_Workbook | 🔗 GitHub Only |
| UserEntityBehaviorAnalytics | 🔗 GitHub Only |
| UserMap | 🔗 GitHub Only |
| Name | Source |
|---|---|
| VaikoraAgentSignalsDashboard | 📦 Vaikora-Sentinel |
| ValenceAlertsWorkbook | 📦 Valence Security |
| vArmour_AppContoller_Workbook | 📦 vArmour Application Controller |
| VaronisSaaS | 📦 VaronisSaaS |
| vCenter | 📦 VMware vCenter |
| VectraXDR | 📦 Vectra XDR |
| VeeamDataPlatformMonitoring | 📦 Veeam |
| VeeamDataPlatformMonitoring | 🔗 GitHub Only |
| VeeamSecurityActivites | 🔗 GitHub Only |
| VeeamSecurityActivities | 📦 Veeam |
| VeeamSecurityActivities | 🔗 GitHub Only |
| VirtualMachinesInsights | 🔗 GitHub Only |
| VisualizationDemo | 🔗 GitHub Only |
| VMwareCarbonBlack | 📦 VMware Carbon Black Cloud |
| VMWareESXi | 📦 VMWareESXi |
| VMwareSASESOCDashboard | 📦 VMware SASE |
| Votiro Monitoring Dashboard | 📦 Votiro |
| VTI_IOC_Feed | 📦 Visa Threat Intelligence (VTI) |
| Name | Source |
|---|---|
| ZeroTrustStrategyWorkbook | 🔗 GitHub Only |
| ZeroTrustTIC3 | 📦 ZeroTrust(TIC3.0) |
| ZimperiumWorkbooks | 📦 Zimperium Mobile Threat Defense |
| ZimperiumWorkbooks | 🔗 GitHub Only |
| ZNSegmentAudit | 📦 ZeroNetworks |
| ZoomReports | 📦 ZoomReports |
| ZscalerFirewall | 🔗 GitHub Only |
| ZscalerOffice365Apps | 🔗 GitHub Only |
| ZscalerThreats | 🔗 GitHub Only |
| ZscalerWebOverview | 🔗 GitHub Only |
| ZscalerZPA | 📦 Zscaler Private Access (ZPA) |
⚠️ Items marked with ⚠️ are not listed in their Solution JSON file. They were discovered by scanning solution folders.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊