{
  "Name": "Watchlists Utilities",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src ='https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg' width='75px' height='75px'>",
  "Description": "The Watchlist Utilities solution for Microsoft Sentinel contains Playbooks that can help automate watchlist usage and integration with incident's management. These include use cases for adding entities (Hosts, IP, URL, User, etc.) to Microsoft Sentinel Watchlists and for incident management.",
  "Playbooks": [
    "Playbooks/Watchlist-Add-HostToWatchList/alert-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-HostToWatchList/incident-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-IPToWatchList/alert-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-IPToWatchList/incident-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-URLToWatchList/alert-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-URLToWatchList/incident-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-UserToWatchList/alert-trigger/azuredeploy.json",
    "Playbooks/Watchlist-Add-UserToWatchList/incident-trigger/azuredeploy.json",
    "Playbooks/Watchlist-ChangeIncidentSeverityandTitleIFUserVIP/alert-trigger/azuredeploy.json",
    "Playbooks/Watchlist-ChangeIncidentSeverityandTitleIFUserVIP/incident-trigger/azuredeploy.json",
    "Playbooks/Watchlist-InformSubowner-IncidentTrigger/azuredeploy.json",
    "Playbooks/Watchlist-CloseIncidentKnownIPs/azuredeploy.json"
  ],
  "BasePath": "C:\\Github\\Azure-Sentinel\\Solutions\\Watchlists Utilities",
  "Version": "2.0.1",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": true
}