Understanding Gamebooks in ContraForce: A Comprehensive Guide

Описание: In this walkthrough, Nino Granzotti explains how to use Gamebooks inside the ContraForce Platform to standardize and automate investigation and response actions. This video is ideal for service providers scaling Microsoft MXDR across multiple customer tenants who need fast execution plus governance, approvals, and auditability.

⸻

In this video, you’ll learn how to:
• Understand what Gamebooks are and which response actions they enable
• Enable Gamebooks by adding Response Modules in a workspace
• Consent the Enterprise Application required to execute Gamebook actions
• Run Gamebooks manually and build multi-step sequences
• Configure agents to execute Gamebooks, including setting a confidence threshold
• Choose agent execution mode: Manual vs On Cue (automatic pickup)
• Track proposals, approvals, and execution history in Gamebook Activity
• Use mapped Gamebook sequences tied to Sentinel rules and recommendations
• Understand permission differences, including why Reset user password is a special case

⸻

Timestamps

0:00 - Introduction to Gamebooks
0:34 - Enable Response Modules in the workspace
0:44 - Consent the Enterprise Application
0:48 - Running Gamebooks manually
1:30 - Building and editing a Gamebook sequence
2:04 - Allowing agents to execute Gamebooks
2:14 - Setting the confidence level requirement
2:27 - Manual vs On Cue agent execution
3:07 - Gamebook Activity, approvals, and tracking
4:02 - Mapped sequences in the Sentinel module
4:26 - Recommendations and rule-driven sequences
5:19 - Permissions model and the Reset password caveat
6:31 - Monitoring usage and response flow
6:46 - Closing

⸻

Learn More

Website: https://contraforce.com
LinkedIn: https://www.linkedin.com/company/contraforce

⸻
#ContraForce #Gamebooks #MicrosoftSecurity #Sentinel #Defender #MDR #XDR #SecurityAutomation #ManagedServices #AIsecurity