Skip to content

Restrict-MDATPIPAddress - #615

Merged
SecurityJedi (dicolanl) merged 3 commits into
masterfrom
dicolanl-17
Apr 27, 2020
Merged

Restrict-MDATPIPAddress#615
SecurityJedi (dicolanl) merged 3 commits into
masterfrom
dicolanl-17

Conversation

@dicolanl

Copy link
Copy Markdown
Contributor

Fixes #

Proposed Changes

@preetikr Preeti Krishna (preetikr) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead of HTTP connector, it'll be better to call the Graph Security Logic Apps connector as:

  1. It simplifies the playbook instead of using a generic connector
  2. Makes it easier to extend the same playbook to push other indicators like URLs to Defender via quick field edits instead of HTTP header updates
  3. Makes it extensible in the future to push TI to other products for TI actions.

@dicolanl

Copy link
Copy Markdown
Contributor Author

Ill update next week, but I would like to point out that for #2 I changed two fields in the JSON body to go from URL to IP. It was very easy

@dicolanl
SecurityJedi (dicolanl) merged commit 2d2fcc0 into master Apr 27, 2020
@YaronFruchtmann
Yaron (YaronFruchtmann) deleted the dicolanl-17 branch July 5, 2021 08:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants