need to trigger all existing recommendation in defenders for cloud.

Question

Please help to find solution as below

• Customer have logic app to notify email to owner subscription. They need to trigger all existing recommendation in defenders for cloud to logic apps. Can we develop or find solution to trigger all existing recommendation at one time.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation#manually-trigger-a-logic-app 

this link show how to manually trigger only 1 by 1

Answer 1

@Anil Sharma Thanks for reaching out. Logic app does provide Microsoft Defender ATP connector. You can refer to supported triggers and actions. As per your requirement you can leverage the Alerts - Get list of alerts action to get the alerts list as per your business need. You need to loop through the result and format the email as per your need.

Workflow:

Recurrence Trigger --> Alerts - Get list of alerts --> Send an Email (V2)

The above is only for reference and you need to modify as per business need.