Share via

How to include our custom watchlist in microsoft sentinel solution package?

Nirali Shah 151 Reputation points
2023-03-07T09:20:35.26+00:00

We have created a custom watchlist using .csv file in Microsoft Sentinel and used watchlist data in workbook. Now we want to ship them in our Sentinel Solution package to make it publicly available in Microsoft Sentinel.

We have found a watchlist template on Sentinel repository. So should we create a template for our custom watchlist considering above template as reference and put it inside our solution package in watchlist folder or there are other steps that we need to follow to make our custom watchlist template publicly available on azure portal?

Can you please provide guidance on it?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,242 questions
Accepted answer
  1. Clive Watson 7,086 Reputation points MVP
    2023-03-07T09:28:56.8766667+00:00

    Please see my previous answer - if this helps please "accept" the answer here.

    https://learn.microsoft.com/en-us/answers/questions/1187221/how-to-create-and-deploy-a-watchlist-template-with

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.