KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #typescript #developer-tools #claude-code #ai-agent #codex #deepseek-harness #ai-agents #cli #react #mcp

sentinelascode

★ 119 Open GitHub ↗

Enable the automatic deployment of Azure Sentinel using code

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

[![Build Status](https://soricloud.visualstudio.com/SentinelAsCode/_apis/build/status/scriptsCI?branchName=master)](https://soricloud.visualstudio.com/SentinelAsCode/_build/latest?definitionId=23&branchName=master)

# Azure Sentinel as Code

**This reposiroty is no longer maintained. The new way to distribute content as code is [Microsoft Sentinel Repositories](https://docs.microsoft.com/en-us/azure/sentinel/ci-cd?tabs=github).**

The purpose of this project is to provide tools to enable automatic deployment of Azure Sentinel environments through Azure DevOps.

A blog post explaining more about this project is available at [Deploying and Managing Azure Sentinel as code](https://techcommunity.microsoft.com/t5/azure-sentinel/deploying-and-managing-azure-sentinel-as-code/ba-p/1131928)

The project has several folders for each of the different Sentinel components that can be configured (Onboard, Connectors, Workbooks, Analytics Rules, Hunting Rules, Playbooks) plus folders for script helpers and Az DevOps YAML pipelines. In this README we explain some of the basics for each of them but we encourage you to visit each of the folders for more details on how to use the tools.

## Scripts

Scripts that are used inside the Azure DevOps pipelines to automate the deployment of the different Sentinel components

## Pipelines

YAML files that define the CI/CD pipelines that can be used to automated the deployment of Sentinel components

## Onboard

Automating the installation of Azure Sentinel on one or more workspaces as defined in config file under Onboard

## Connectors

Automatically connect data sources to start sending data into Sentinel. This can only be done for Microsoft first party services that don't require additional configuration on the data source side

## Workbooks

Collection of custom workbooks in JSON format that can be leveraged to add additional visibility into environments

## Analytics Rules

Definition files containing all the analytics rule alerts to be created in an environment

## Hunting Rules

Definition files containing all the hunting rules to be created in an environment

## Playbooks

Collection of custom playbooks to be added to your Sentinel environment

sentinelascode

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README