Forum Discussion

Cyb3rM0nK3y's avatar
Cyb3rM0nK3y
Icon for Bronze II rankBronze II
6 months ago
Solved

Microsoft Sentinel SOAR: Playbooks Issue

I am currently trying to complete the Microsoft Sentinel SOAR: Playbooks lab but have encountered an issue with question 10.

I have followed the steps up to "Switch to the Automated response tab." but when I try to click "Add new" under "Automation rules" nothing happens. 

Is there a known issue with the lab or am I doing something wrong?

I have tried refreshing the page and even resetting the lab and starting again but always get to the same point. 

help & support
  • AdamMartin's avatar
    AdamMartin
    6 months ago

    Hi Cyb3rM0nK3y thanks for your query on this lab, I have run the lab a few times and found when you click on the + to add a new auto-response for the SSH – Potential Brute Force analytic rule, the window popped up on the right-hand side of the screen as per the screenshot below.

    If this doesn't happen for you, let me know and we can investigate further. I can see you mention resetting the lab, and apologies if I'm suggesting something you have already tried, but the most effective way is exiting the lab using the Exit button in the corner and clicking 'End lab' as this will reset it for you to try again. Let me know how you get on!

     

2 Replies

  • AdamMartin's avatar
    AdamMartin
    Icon for Community Support rankCommunity Support
    6 months ago

    Hi Cyb3rM0nK3y thanks for your query on this lab, I have run the lab a few times and found when you click on the + to add a new auto-response for the SSH – Potential Brute Force analytic rule, the window popped up on the right-hand side of the screen as per the screenshot below.

    If this doesn't happen for you, let me know and we can investigate further. I can see you mention resetting the lab, and apologies if I'm suggesting something you have already tried, but the most effective way is exiting the lab using the Exit button in the corner and clicking 'End lab' as this will reset it for you to try again. Let me know how you get on!

     

  • TillyCorless's avatar
    TillyCorless
    Icon for Community Manager rankCommunity Manager
    6 months ago

    Hi Cyb3rM0nK3y thanks for sharing your challenge with the community. I will ask the author of this lab and come back to you. However in the meantime, if any community members have completed this lab, please share your expertise!