How to include our custom watchlist in microsoft sentinel solution package?

Nirali Shah 146 Reputation points
2023-03-07T09:20:35.26+00:00

We have created a custom watchlist using .csv file in Microsoft Sentinel and used watchlist data in workbook. Now we want to ship them in our Sentinel Solution package to make it publicly available in Microsoft Sentinel.

We have found a watchlist template on Sentinel repository. So should we create a template for our custom watchlist considering above template as reference and put it inside our solution package in watchlist folder or there are other steps that we need to follow to make our custom watchlist template publicly available on azure portal?

Can you please provide guidance on it?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,002 questions
{count} votes

Accepted answer
  1. Clive Watson 5,801 Reputation points MVP
    2023-03-07T09:28:56.8766667+00:00

    Please see my previous answer - if this helps please "accept" the answer here.

    https://learn.microsoft.com/en-us/answers/questions/1187221/how-to-create-and-deploy-a-watchlist-template-with


0 additional answers

Sort by: Most helpful