Microsoft Sentinel SOAR: Playbooks Issue
I am currently trying to complete the Microsoft Sentinel SOAR: Playbooks lab but have encountered an issue with question 10.
I have followed the steps up to "Switch to the Automated response tab." but when I try to click "Add new" under "Automation rules" nothing happens.
Is there a known issue with the lab or am I doing something wrong?
I have tried refreshing the page and even resetting the lab and starting again but always get to the same point.
Hi Cyb3rM0nK3y thanks for your query on this lab, I have run the lab a few times and found when you click on the + to add a new auto-response for the SSH – Potential Brute Force analytic rule, the window popped up on the right-hand side of the screen as per the screenshot below.
If this doesn't happen for you, let me know and we can investigate further. I can see you mention resetting the lab, and apologies if I'm suggesting something you have already tried, but the most effective way is exiting the lab using the Exit button in the corner and clicking 'End lab' as this will reset it for you to try again. Let me know how you get on!