Update now: Stop Running Playbooks Directly from Analytics Rules
Knowing is only half the battle
Since its inception, Microsoft Sentinel has always allowed the ability to assign a specific Playbook (or multiple Playbooks if required) to the Automation section of an Analytics Rules (as shown in t…
Keep reading with a 7-day free trial
Subscribe to Rod’s Blog to keep reading this post and get 7 days of free access to the full post archives.


