Content Hub
Microsoft Sentinel content hub provides packaged solutions with data connectors, analytics rules, hunting queries, workbooks, playbooks, and related content.
capabilitiesCurrent
Relationships
Configuration Methods
| Method | Support | Reference or Gap |
|---|---|---|
| Portal | Supported | Reference |
| PowerShell | Gap | No product-specific PowerShell automation surface is recorded for this capability yet. |
| REST API | Supported | Reference |
| Graph | Gap | No supported Microsoft Graph configuration surface is recorded for this capability yet. |
| ARM | Gap | Content Hub package installation is exposed through Microsoft.SecurityInsights content package APIs rather than a stable first-class ARM/Bicep authoring model. |
| Bicep | Gap | Use REST or deploy the underlying artifacts directly as ARM/Bicep after package selection. |
| Terraform | Gap | No azurerm resource exists for Content Hub package installation. Use REST/azapi or deploy the package artifacts as explicit resources. |
| GitHub Actions | Supported | Reference |
| Azure DevOps | Supported | Reference |