capability

Automation Rules

Microsoft Sentinel automation rules triage incidents and alerts by changing incident properties, assigning owners, adding tasks, or launching playbooks.

capabilitiesCurrent

Relationships

Microsoft Sentinel
Source productproductSecurityIncident
Related tabletableMicrosoft Sentinel REST API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellGapNo product-specific PowerShell automation surface is recorded for this capability yet.
REST APISupported Reference
GraphGapNo supported Microsoft Graph configuration surface is recorded for this capability yet.
ARMSupported Reference
BicepSupported Reference
TerraformSupportedazurermazurerm_sentinel_automation_rule Reference
GitHub ActionsSupported Reference
Azure DevOpsSupported Reference