Microsoft Sentinel × Tines
Integrating Tines’ automation capabilities with Microsoft Sentinel enhances incident response workflows by streamlining security operations through seamless data correlation and automated actions.
Pre-built templates
With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.
Build your own connections
With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.
cURL request
curl -v -X GET --location "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" -H 'Content-Type: application/json'Paste in your Tines story
Full workflow examples
Explore pre-built workflows for Microsoft Sentinel. Use them for inspiration or as a starting point to build your custom automation solution.
Receive Azure Sentinel alerts and block IPs with firewall rules
Tools: Microsoft, Microsoft Azure
Take action on Azure Sentinel alerts depending on severity level
Tools: Jira Software, Microsoft, Microsoft Azure, Microsoft Teams
Query Log Analytics for Azure Sentinel alerts
Tools: Microsoft, Microsoft Azure
Connect quickly
It takes minutes, not months, to connect to tools in Tines.
More Microsoft Azure products
Explore more resources
Check out our blogs that mention Microsoft Sentinel, browse our learning paths, and more.
Blog
Orchestrate powerful workflows with Azure Sentinel and Tines
Read now
Case studies
Powerful users, powerful studies
Discover how companies – from Fortune 10 to startups – apply Tines to transform the way their teams operate.
Read case studies
Learn
Tines University
Build your knowledge with dedicated learning paths at all levels.
Start learning
Learn
Learn to use Tines with our documentation
Go to docs