Blog Post

Microsoft Sentinel Blog
3 MIN READ

Import Pulsedive Feed into Microsoft Sentinel

RijutaKapoor's avatar
RijutaKapoor
Icon for Microsoft rankMicrosoft
Jun 07, 2022
Microsoft Sentinel is a cloud native SIEM that offers various options to import threat intelligence data and use them for hunting, investigation, analytics etc. Some of the ways to import rich threat...
Updated Jun 07, 2022
Version 1.0
JMSHW0420's avatar
JMSHW0420
Iron Contributor
Jan 30, 2023

Hello,

 

I am struggling to connect to Microsoft Sentinel through this data connector and the Pulse Dive TI service.

 

As seen below, I have a FREE account and am trying to 'connect' to the free 'Collection'.

 

Can I clarify that the following is correct:

 

API root: https://pulsedive.com/taxii2/api/
Collection ID: 981c4916-ebb2-4567-aece-54ae970c4230
Username: jmshw0123
Password: your API key, which can be found on your account page

 

I have run the following operation in Pulse Dive (Explore) : GET request to /taxii2/api/collections/981c4916-ebb2-4567-aece-54ae970c4230/objects/ and it returns data. Also stating that I have read access to the collection ("can_read": true...)

 

ANY guidance would be appreciated...