HTTP Actions in Security Automation
In this video you will learn how to leverage the HTTP action to invoke a Azure Rest API in Logic Apps. You will explore Microsoft Defender for Cloud, Logic App versions, Managed System identity combined with a few actions to start invoking a Azure rest api. You will learn about the HTTP and Date & Time actions. Along the way you will be provided tips and tricks and learn some additional techniques in authoring Security Automation in Logic Apps. #MicrosoftSentinel #MicrosoftDefenderforCloud #LogicApps #SecurityAutomation #AzureSecurity
********************************* Links 🔗 *********************************
Walkthrough in blog:
Azure Activity Logs - List API: https://docs.microsoft.com/en-us/rest...
Microsoft Sentinel Playbooks: https://github.com/Azure/Azure-Sentin...
Microsoft Defender for Cloud Workflow Automation: https://github.com/Azure/Azure-Securi...
Working with Logic App Parameters While Building Azure Security Center Automations: https://techcommunity.microsoft.com/t...
********************************* Chapters 📚 *****************************
01:25 - Activity Logs - List API
06:24 - Logic App versions blade
09:15 - Create variable Azure ResourceID from entity array
13:12 - Build out Date Time stamp variables
16:50 - Create HTTP Action to call API
18:12 - Setup Logic App managed identity for authentication
22:40 - Build out HTTP Action to call API
25:25 - George Wilburn's extract Working with Logic App parameters
28:00 - Test Logic App HTTP Action API call and results
33:45 - Commenting your Logic Apps
*************************** Music 🎶 & Credits 🧾 *************************
Warlike from A Year To Remember by Neaon
Link: https://neaon.bandcamp.com/track/warlike