Threat Intelligence Sharing

Question

Hi all,

Is it possible to use threat intelligence from a third party solution with Microsoft sentinel?

And if possible, how would you connect them? Custom connectors?

regard,

Answer 1

Hello, to connect TI please take a look here https://learn.microsoft.com/en-us/Azure/sentinel/threat-intelligence-integration

Most of this integration is via STIX/TAXII, and there is a Solution/Connector for that https://learn.microsoft.com/en-us/Azure/sentinel/connect-threat-intelligence-taxii