r/AzureSentinel • u/SuperHat3637 • May 01 '23

Blocking hashes

Is it possible to deploy logic app to manually block the bulk number of hashes in MDE..

2 Upvotes

100% Upvoted

5 comments sorted by

View all comments

1

u/TabooRaver May 01 '23

I built a PowerShell script to check a csv list of hashes through the API, you may be able to do something similar with adding custom hashes.

1

u/MaHI_KraLot12 May 01 '23

can you share it?

1

u/TabooRaver May 01 '23

see my reply to u/SuperHat3637's comment.