Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Dragos OT data connector lets you bring OT data from Dragos into Microsoft Security Exposure Management.
Prerequisites
Before you configure the Dragos OT data connector, make sure you have:
Your Dragos Hostname, API Key, and API Secret.
Data retrieved by the connector
The Dragos OT data connector retrieves the following asset and device properties:
- Device name (hostname)
- IP address
- MAC address
- Domain
- Operating system details, including OS platform, OS platform friendly name, and kernel version
- Vendor
- Model
- Firmware version
- Serial number
- Device type
- Device subtype
- Sensor associations
- Zone
- Dragos criticality
Connect the Dragos OT data connector
Sign in to the Microsoft Defender portal.
Go to System > Data management > Data connectors.
In Unified connectors, select Catalog.
Select Dragos.
Select Add new instance.
In Connector name, enter a name for the connector instance.
In Hostname, enter your Dragos hostname without the
http://orhttps://prefix.In API Key, enter the API key from Dragos.
In API Secret, enter the API secret from Dragos.
Select Next.
Confirm that MSEM (Microsoft Security Exposure Management) is selected.
Select Next.
Review the connector details.
Select Connect.
Verify the connection
In the Microsoft Defender portal, go to System > Data management > Data connectors.
In Unified connectors, select My connectors.
Confirm that the Dragos connector instance appears with a connected status.