Exploring the Playbooks tab

To access the list of playbooks, from the Microsoft Sentinel Automation page, select the Playbooks tab. This will show the Microsoft Sentinel Playbooks page.

This page will list all the logic apps in the subscription(s) you have selected to show in the Azure portal. You will need to look at the Trigger kind column to see whether the logic app can be used as a playbook. If it contains Microsoft Sentinel, you can use this logic app as a playbook:

Figure 12.9 – The Microsoft Sentinel Playbooks page

Tip

You can also access your playbooks by going to the Logic App screen. However, it will not present the same amount of information as what's shown in the preceding screenshot.

Since the header and the summary bars are the same as what we discussed earlier when talking about the Automation rules, they will not be discussed here again. Refer to those sections for more information if needed.

Let's look at the logic...