Threat Intelligence Sharing

横田　大和 0 Reputation points
2024-04-23T14:43:59.2633333+00:00

Hi all,

Is it possible to use threat intelligence from a third party solution with Microsoft sentinel?

And if possible, how would you connect them? Custom connectors?

regard,

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
986 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 5,716 Reputation points MVP
    2024-04-25T06:18:36.87+00:00

    Hello, to connect TI please take a look here https://learn.microsoft.com/en-us/Azure/sentinel/threat-intelligence-integration

    Most of this integration is via STIX/TAXII, and there is a Solution/Connector for that https://learn.microsoft.com/en-us/Azure/sentinel/connect-threat-intelligence-taxii

    0 comments