Category Archives: OpenAI

A playbook to generate a security incident’s initial assessment where Azure OpenAI connects the dots for the junior SOC engineers.

A playbook for SOC engineers to brainstorm with Azure OpenAI on ways to improve the quality of security alerts and prevent false positives.

Documenting a few improvements on the SOC chatbot I created in my previous post. Specifically, keeping the chatbot grounding information up to date using a Cognitive Search recurring indexer.

Generating Sentinel incident investigation suggestions based on comments from closed related incidents using a custom Logic App that connects to Azure OpenAI. And for some additional grounding, a little RAG for a chatbot that knows a lot about my customers.

Generating an Incident Report based on data from a Sentinel incident using a custom Logic App that connects to Azure OpenAI (gpt-3.5-turbo and gpt-4).

Sentinel automation playbooks using a custom Logic App connector that uses the new API with gpt-3.5-turbo and gpt-4. This time with Azure OpenAI vs OpenAI. This playbook creates incident tasks generated from AOAI.