From 879ba149c2a69af0e4110b9ef5991880885cfe19 Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Fri, 5 Jul 2024 14:56:30 +0200 Subject: [PATCH] Update o365.md --- .../integrations/cloud_and_saas/office365/o365.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/xdr/features/collect/integrations/cloud_and_saas/office365/o365.md b/docs/xdr/features/collect/integrations/cloud_and_saas/office365/o365.md index c6bfe8234c..e3befe0e98 100644 --- a/docs/xdr/features/collect/integrations/cloud_and_saas/office365/o365.md +++ b/docs/xdr/features/collect/integrations/cloud_and_saas/office365/o365.md @@ -94,12 +94,12 @@ Go to your Sekoia.io [Intakes page](https://app.sekoia.io/operations/intakes), a Go to your Sekoia.io [playbooks page](https://app.sekoia.io/operations/playbooks), and follow these steps: -1. Click on `+New playbook` to create a new playbook -2. Select `Use a template` when creating a playbook -3. Search for `Office 365` then select `Office 365 Management API` -4. Configure the module configure with the `tenant id`, the `client id` and the `client secret` -5. Set up the trigger configuration with the `intake key` from the previous step -6. Save the playbook and start it +1. Click on `+New playbook` to create a new playbook +2. Select `Create a playbook from scratch` when creating a playbook +3. Give it a `Name` and a `Description` +4. During the step "Choose a trigger", search for `Office 365` then select `Office 365 Management API`. The playbook details interface will open and will contain only one module named `Office 365 Management API` +6. Click on the module, and configure it by clicking on the "Configuration" tab on the right panel using the `client id`, the `client secret`, the `intake key` (from the previous step) and `tenant id` +8. Save the playbook and start it !!! Important Once the integration is created on Sekoia.io, it may take up to 12 hours for the Microsoft API to make data available for the first time.