https://store-images.s-microsoft.com/image/apps.4545.0ddc98fa-9160-4919-bfa7-0a61f352fb86.9014117b-4c7b-4060-81aa-1ee5bb7b9b28.4422f3ef-3234-40ef-949b-70270d845d58

RiskIQ Security Intelligence Playbooks (Preview)

RiskIQ

RiskIQ Security Intelligence Playbooks (Preview)

RiskIQ

RiskIQ has packaged several security intelligence playbooks into a single solution offering

RiskIQ has created several Azure Sentinel playbooks that pre-package functionality in order to enrich and add context to incidents within the Azure Sentinel platform. These playbooks can be ran individually or configured to run automatically within the Azure Sentinel portal. When an incident contains a known indicator such as a domain or IP address, RiskIQ will enrich that value with what else it's connected to on the Internet and if it may pose a threat. Comments are added to the incident that link to further detailed information within RiskIQ's investigative platform.
https://store-images.s-microsoft.com/image/apps.7801.0ddc98fa-9160-4919-bfa7-0a61f352fb86.9014117b-4c7b-4060-81aa-1ee5bb7b9b28.47968949-7885-4d8f-8238-a3d3d55a7464
https://store-images.s-microsoft.com/image/apps.7801.0ddc98fa-9160-4919-bfa7-0a61f352fb86.9014117b-4c7b-4060-81aa-1ee5bb7b9b28.47968949-7885-4d8f-8238-a3d3d55a7464
https://store-images.s-microsoft.com/image/apps.16727.0ddc98fa-9160-4919-bfa7-0a61f352fb86.9014117b-4c7b-4060-81aa-1ee5bb7b9b28.c96b3f15-184a-49a1-afa3-bcdaa2e3ad83