How to use Microsoft Intune in SecureX Automation Workflows

charlesapap — Wed, 26 Apr 2023 21:42:16 GMT

I have recently integrated Microsoft Intune with SecureX and am looking for some "quick wins" to trial automation with the platform.

Are there any documents, resources or premade workbooks specific to Intune that would give a flavour for how to get started leveraging Intune for Orchestration?

Re: How to use Microsoft Intune in SecureX Automation Workflows

osanniko — Thu, 27 Apr 2023 14:47:00 GMT

Hello.
You can find all available pre-built workflows here. There are several common use cases we see for automation with MDM solutions with regarding to SecureX Orchestration. These use cases are related to enrichment and response activities as part of conducting event triage, incident investigation and response activities. The first one would be about getting context about user and device being investigated by IP address/user name. The second one is dynamically changing trust policies based on context from other tools (e.g. an event from EDR, email, IPS/IDS, web security triggering change in trust action to user/device within Microsoft Intune).

topic How to use Microsoft Intune in SecureX Automation Workflows in Cisco XDR

How to use Microsoft Intune in SecureX Automation Workflows

Re: How to use Microsoft Intune in SecureX Automation Workflows