Sending Email to Security Contact on Alert Is Off
More Info:
Set Send Me Email About Alerts to On.Risk Level
LowAddress
SecurityCompliance Standards
CISAZURE, CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Sending Email to Security Contact on Alert Is Off” for Azure using Azure console, follow the below steps:
- Log in to Azure portal (https://portal.azure.com/)
- Navigate to the Security Center by clicking on the Security Center icon from the left-hand side menu.
- In the Security Center, click on the “Security policy” option from the left-hand side menu.
- Scroll down to the “Email notifications” section and click on the “Edit settings” button.
- In the “Email notifications” section, you will see the option “Send email to security contact on alert” which is turned off by default. To remediate this misconfiguration, turn on this option by clicking on the toggle button.
- Once you have turned on the “Send email to security contact on alert” option, click on the “Save” button to save the changes.
- After saving the changes, Azure will send an email to the security contact on alert whenever an alert is triggered.
Using CLI
Using CLI
To remediate the misconfiguration “Sending Email to Security Contact on Alert Is Off” for Azure using Azure CLI, you can follow the below steps:Step 1: Open the Azure CLI and login to your Azure account using the command:Step 2: Once you are logged in, set the correct subscription using the command:Step 3: Check the current status of the “Send email to security contact on alert” setting using the command:Step 4: If the setting is set to “false”, then update the setting to “true” using the command:Note: Replace the After following the above steps, the misconfiguration “Sending Email to Security Contact on Alert Is Off” will be remediated for Azure using Azure CLI.
<resource_group_name>, <security_alert_name> and <security_contact_email> with the actual values.Step 5: Verify the updated setting using the command:Using Python
Using Python
To remediate the misconfiguration “Sending Email to Security Contact on Alert Is Off” for AZURE using Python, you can follow these steps:By following these steps, you can remediate the misconfiguration “Sending Email to Security Contact on Alert Is Off” for AZURE using Python.
- Import the necessary libraries:
- Set the credentials and subscription ID:
- Initialize the MonitorManagementClient:
- Get the existing action groups:
- Check if the action group for sending email to security contact on alert exists, if not create it:
- Enable the action group:
- Verify that the action group is enabled: