Skip to content

jongABCDsudo-rm-rf/MicrosoftSentinelAutomation

 
 

Repository files navigation

MicrosoftSentinelAutomation

Some PowerShell scripts to extract MS Sentinel automation rules

Export-AzSentinelAutomationRule

Exports one or more Automation rules from the specified workspace. If you specify the AutomationRuleId parameter, a single Automation rule is exported. If you do not specify the AutomationRuleId parameter, all the automation rules in the specified workspace will be exported. The filename format is .json

Get-AzSentinelAutomationRule

Displays one or more automation rules. If you pass in the AutomationRuleId value, only that automation rule will be displayed. Otherwise all the rules will be displayed.

Get-AzSentinelAutomationRuleIDs

Displays just the automation rule's displayname and ids. Easy way to get a single ID.

About

A couple of PowerShell scripts to extract MS Sentinel automation rules

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages

  • PowerShell 100.0%