Edit

Connect the Dragos OT data connector

The Dragos OT data connector lets you bring OT data from Dragos into Microsoft Security Exposure Management.

Prerequisites

Before you configure the Dragos OT data connector, make sure you have:

Data retrieved by the connector

The Dragos OT data connector retrieves the following asset and device properties:

  • Device name (hostname)
  • IP address
  • MAC address
  • Domain
  • Operating system details, including OS platform, OS platform friendly name, and kernel version
  • Vendor
  • Model
  • Firmware version
  • Serial number
  • Device type
  • Device subtype
  • Sensor associations
  • Zone
  • Dragos criticality

Connect the Dragos OT data connector

  1. Sign in to the Microsoft Defender portal.

  2. Go to System > Data management > Data connectors.

  3. In Unified connectors, select Catalog.

  4. Select Dragos.

  5. Select Add new instance.

  6. In Connector name, enter a name for the connector instance.

  7. In Hostname, enter your Dragos hostname without the http:// or https:// prefix.

  8. In API Key, enter the API key from Dragos.

  9. In API Secret, enter the API secret from Dragos.

  10. Select Next.

  11. Confirm that MSEM (Microsoft Security Exposure Management) is selected.

  12. Select Next.

  13. Review the connector details.

  14. Select Connect.

Verify the connection

  1. In the Microsoft Defender portal, go to System > Data management > Data connectors.

  2. In Unified connectors, select My connectors.

  3. Confirm that the Dragos connector instance appears with a connected status.