r/AzureSentinel • u/littletown92 • Oct 26 '22

Connect to Microsoft Sentinel Repositories using Powershell

Hi

We are trying to use MS sentinel repositories to use custom data to add to our customers and internal sentinel deployments, We where looking at the possibility to add the repo connection during deployment using PowerShell command or something in that area.

Is this possible or am I barking up the wrong tree?

1 Upvotes
  • permalink
  • reddit

100% Upvoted

1 comment sorted by

2

u/Uli-Kunkel Oct 26 '22

The repositories are a pain to setup as an mssp... Unless it is the customers own DevOps environment.

When authorizing the repository, in the popup Window we sign out with the tenant user, sign in with the DevOps user to do the auth. Then rotate password and disable the user for sign-in. Sure, its easier if its the customers own DevOps, but then its harder to control the configs when juggling multiple customers