Microsoft Sentinel × Tines
Integrating Tines’ automation capabilities with Microsoft Sentinel enhances incident response workflows by streamlining security operations through seamless data correlation and automated actions.
Pre-built templates
With Tines Stories, you can easily take any action that has a defined API. We’ve already pre-built some of the most popular ones for you, so you can build quickly.
Build your own connections
With Tines Stories, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.
cURL request
curl -v \
-X GET \
--location \
"https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" \
-H 'Content-Type: application/json'Paste in your story
Full workflow examples
Explore pre-built workflows for Microsoft Sentinel. Use them for inspiration or as a starting point to build your custom automation solution.


Query Log Analytics for Azure Sentinel alertsTools: Microsoft, Microsoft Azure

Receive Azure Sentinel alerts and block IPs with firewall rulesTools: Microsoft, Microsoft AzureConnect quickly
It takes minutes, not months, to connect to tools in Tines Stories.
More Microsoft products
Explore more resources
Check out our blogs that mention Microsoft Sentinel, browse our learning paths, and more.