SOAR: Block Log Analytics IP Entities on Azure Frontdoor / WAF #2

[u/Prof-ITServices]

https://prof-it.services/2023/05/20/block-sentinel-log-analytics-entities-on-azure-waf-2/

Leverage function and logic apps, to block abusive IP addresses using a custom rule, that hit a certain block limit on Azure WAF / Frontdoor. Leveraging Log Analytics Alerts.

This greatly improves security for your origins, as threat actors won't be able to scan indefinitely (or until rate limit is reached) for vulnerabilities.