Blog Post

Microsoft Sentinel Blog
13 MIN READ

Bring your threat intelligence to Microsoft Sentinel

Jason_Wescott's avatar
Jason_Wescott
Former Employee
Feb 11, 2020
Bring your threat intelligence to Microsoft Sentinel   Introduction Cyber threat intelligence (CTI) is information describing existing or potential threats to systems and users. This type of in...
Updated Aug 03, 2022
Version 13.0
Jason_Wescott's avatar
Jason_Wescott
Former Employee
Nov 02, 2020

Hi m3mdb and MarkDavidson2,

 

We found a bug connecting to this particular TAXII server. We will check in a fix asap.

 

Update (Nov 24), I have validated the system.cybercrime_tracker.net collection is now working after the fixes we made a couple of weeks back. Please keep in mind the other collections on this server are providing objects other than 'indicator' and so will not be imported into Azure Sentinel until we add support for other STIX object types. Currently 'indicator' objects are our priority since these are most useful for matching against your event data using Analytics and Hunting to generate security insights.

 

Thanks,
Jason