What should you do?

You have a playbook in Azure Sentinel.

When you trigger the playbook, it sends an email to a distribution group.

You need to modify the playbook to send the email to the owner of the resource instead of the distribution group.

What should you do?
A . Add a parameter and modify the trigger.
B . Add a custom data connector and modify the trigger.
C . Add a condition and modify the action.
D . Add a parameter and modify the action.

View Answer

Answer: D

Explanation:

Reference: https://azsec.azurewebsites.net/2020/01/19/notify-azure-sentinel-alert-to-your-email-automatically/