Blog Post

Microsoft Sentinel Blog
4 MIN READ

Bring threat intelligence from Sixgill using TAXII Data Connector

RijutaKapoor's avatar
RijutaKapoor
Icon for Microsoft rankMicrosoft
Dec 08, 2020
Bring threat intelligence from Sixgill using TAXII Data Connector   As discussed in the blog Bring your threat intelligence to Azure Sentinel, Azure Sentinel provides various ways to import threa...
Updated Dec 08, 2020
Version 1.0
RijutaKapoor's avatar
Icon for Microsoft rankMicrosoft
Joined July 15, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Sentinel by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

SalmanKhan's avatar
SalmanKhan
Copper Contributor
Dec 28, 2020

If we import threat intelligence from multiple sources like Anomali and Sixgill, and we activate rules in Sentinel to generate incidents, will the rules correlate URLs and IPs in events with all the TI-sources automatically, or do we need to create a separate rule for each threat intelligence source?