Simulate Alerts - Blink Documentation

Integrations

Integrations
1Password
Abnormal
Absolute
AbuseIPDB
Acronis
Adaptive Shield
Adobe Cloud
ADP
Agari Phishing Response
Airlock
Airlock Digital
Akamai Identity Cloud Social
Alert Logic
AlgoSec Firewall Analyzer
Alienvault OTX
Alienvault USM
Anthropic
Anodot
Any Run
Ansible
Anvilogic
Apex One
ArcSight ESM
Area 1
Asana
Asset Panda
Atlassian Crowd
Atlassian User Management
Atlassian User Provisioning
AuditBoard
auth0
Authentik
Authomize
Automox
AWS
AWS IAM Identity Center
Axonius
Azure
Azure Data Explorer
Azure DevOps
Azure Log Analytics
Azure Storage
BambooHR
Big Fix
BigPanda
Bitbucket
Bitdefender
Bitsight
Bitwarden
Black Duck
Black Kite
Blink
BMC Remedy
Box
Brinqa
Cato Networks
Censys
Chorus
Cisco Advanced Phishing Protection
Cisco Domain Protection
Cisco Meraki
Cisco Talos
Cisco Umbrella
Cisco Webex
Claroty xDome
ClearPass
ClickHouse
ClickUp
Cloud Custodian
Cloudflare
Cloudflare R2
Cobalt.io
Check Point Harmony
Check Point Infinity Events
Check Point Management
Check Point XDR/XPR
Checkmarx SAST
Checkmarx One
Chronicle
Compass
Confluence
Confluence Data Center
Coralogix
Coralogix Incident Management
Cortex XDR
Cortex Xpanse
CredStash
Cribl
CrowdStrike
CyberArk
Cybersixgill
CyCognito
Cyera
Cylance
Cyware CTIX
Darktrace
Dasera
Databricks
Datadog
DataSet
Discord
Docusign
Delighted
Delinea
Devo
Domo
Drata
Dropbox
Dropbox Business
druva
Duo
Duo Auth
Dynatrace
EasyVista
EchoTrail
Egnyte
Egnyte Secure Govern
Elasticsearch
Entro
Ermetic
Exabeam
Exchange Online
Expel
F5
Falcon LogScale
Falcon Surface
Flare.io
Forcepoint DLP
Forescout
FortiGate
Freshservice
GCP
Gemini
Ghostwriter
Git
GitHub
GitLab
Glean
Gmail
Google Calendar
Google Chat
Google Docs
Google Drive
Google Forms
Google Meet
Google Looker
Google Sheets
Google Workspace
Grafana
Greenhouse
GreyNoise
Grip Security
GYTPOL
Have I Been Pwned
HackerOne
Halo Service Desk
HiBob
HubSpot
Hunters
Hybrid Analysis
Hyperproof
IBM CLoud
IBM NS1 Connect
IBM X Force
Imperva
Incident.io
Infobip
Infoblox Cloud Services Portal
Intercom
Intezer
IP API
IPinfo
IPWHOIS
Ivanti RiskSense
Ironscales
Jamf
JetBrains
JFrog
Jira
Jira Data Center
Joe Sandbox
JumpCloud
Kandji
Keeper Secrets Manager
Kenna Security
KnowBe4
KnowBe4 Events
Kubernetes
Lacework
LaunchDarkly
Linear
Litmos
LogicMonitor
LogRhythm
Manage Engine ServiceDesk Plus
Mattermost
Maven
Microsoft Defender For Cloud
- Overview
- Actions
- Need Admin Approval
Microsoft Defender For Cloud Apps
Microsoft Defender For Endpoints
Microsoft Defender XDR
Microsoft E-Discovery
Microsoft Entra ID
Microsoft Graph
Microsoft Intune
Microsoft Office 365 Management Activity
Microsoft Outlook
Microsoft Purview
Microsoft Sentinel
Microsoft SQL Server
Microsoft Teams
Mimecast
MISP
Monday
MongoDB Atlas
MxToolbox
Neo4j
NetBox
Netography
Netskope
New Relic
Nightfall AI
NinjaOne
Notion
Nozomi Networks
Nuclei
Nucleus
Nutanix Hypervisor
Obsidian
Okta
OneDrive
OneLogin
OneTrust
Oort
OpenAI
OpenCTI
Opsgenie
OPSWAT
Oracle Cloud
Oracle HCM
Orca Security
OWASP ZAP
PagerDuty
Palo Alto NGFW
Palo Alto Firewall
Panther
Pentera
Perception Point
PhishLabs
PhishLabs Incident Data
PhishLabs Open Web Monitoring
Pingdom
PingID
PingOne
PlexTrac
PortSwigger
Power BI
PowerShell
Postman
Postman SCIM
Prisma Access
Prisma Cloud
Prisma Cloud CWP
Prometheus
Proofpoint
Proofpoint ITM
Proofpoint Protection Server
Proofpoint Security Awareness Training
Proofpoint TAP
Proofpoint TRAP
Pub-Sub
QRadar
Qualys
Rapid7
Rapid7 InsightIDR
Rapid7 InsightVM Cloud
Rapid7 Threat Command
Reco
Recorded Future
Recorded Future Triage Cloud
Red Hat IDM
Rippling
runZero
SafeBase
Sage HR
SailPoint
SailPoint IdentityIQ
Salesforce
SAP Ariba
ScienceLogic
Securin
Securin VI
SecurityScorecard
Securonix
Sekoia.io
SemGrep
SentinelOne
ServiceNow
SharePoint
Shodan
Shopify
Silverfort
Slack
Smartsheet
Snipe IT
Snowflake
Snyk
SolarWinds Service Desk
SonarQube
Sophos
Split
Splunk
Splunk Observability
Splunk SOAR
Spur
StrongDM
Sumo Logic
Symantec EDR
Sysdig
Tableau
Tanium
TeamCity
TeamViewer
Telegram
Tenable
Tenable Security Center
Terraform
Terraform Cloud
Tessian
TheHive
Thinkst Canary
ThreatQuotient
Trellix Email Security
Trello
Trend Vision One
Twilio
UKG HR
Uptycs
URLScan
Vault
Veracode
Verkada
Vertica
VMware vSphere
VMware Carbon Black
VirusTotal
WeChat
WhatsApp
WhoIs
WildFire
Wiz
Workday
Workspace ONE UEM
YesWeHack
Zendesk
Zero Networks
Zoom
Zscaler Internet Access
Zscaler Private Access

Simulate security alerts.

External Documentation

To learn more, visit the Microsoft Defender For Cloud documentation.

Parameters

Parameter	Description
ASC Location	The location of the Azure Security Center which stores the data of the subscription.
Bundles	A comma-separated list of the kinds of alert simulation.
Subscription ID	Azure subscription ID.

Workflow Library Example

Simulate Alerts with Microsoft Defender for Cloud and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Microsoft Defender For Cloud Custom Action Update Alert Status

On this page

Parameters
Workflow Library Example

Integrations

​Parameters

​Workflow Library Example

Parameters

Workflow Library Example