Microsoft Sentinel × Tines

Integrating Tines’ automation capabilities with Microsoft Sentinel enhances incident response workflows by streamlining security operations through seamless data correlation and automated actions.

Microsoft Sentinel

Pre-built templates

With Tines Stories, you can easily take any action that has a defined API. We’ve already pre-built some of the most popular ones for you, so you can build quickly.

Append Tags to Threat Intelligence in Azure Sentinel
Create Bookmarks in Azure Sentinel
Create Incident Comments in Azure Sentinel
Create Incidents in Azure Sentinel
Create Threat Intelligence Indicators in Azure Sentinel
Create Watchlist Item in Azure Sentinel
Get Bookmarks in Azure Sentinel
Get Incident Comments in Azure Sentinel
Query Threat Intelligence Indicators in Azure Sentinel
Update Bookmarks in Azure Sentinel
Update Incident Comments in Azure Sentinel
Update Incidents in Azure Sentinel
Update Watchlist Item in Azure Sentinel

Build your own connections

With Tines Stories, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v \ -X GET \ --location \ "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" \ -H 'Content-Type: application/json'

Paste in your story

HTTP requestRequest toapi.nasa.gov

Full workflow examples

Explore pre-built workflows for Microsoft Sentinel. Use them for inspiration or as a starting point to build your custom automation solution.

Connect quickly

It takes minutes, not months, to connect to tools in Tines Stories.

More Microsoft products

View all Microsoft products →

Microsoft

Explore more resources

Check out our blogs that mention Microsoft Sentinel, browse our learning paths, and more.

Built by you,
powered by Tines

Already have an account? Log in.

Tines × Microsoft Sentinel | Templates | Tines Stories | Tines