Blog Post

Microsoft Sentinel Blog
5 MIN READ

Integrating open source threat feeds with MISP and Sentinel

robeving's avatar
robeving
Icon for Microsoft rankMicrosoft
May 14, 2020
Recently, Microsoft released an open source set of malicious file hash indicators identified as using COVID-19 themed malicious email attachments in attempted attacks against our customers. Office365...
Updated Nov 03, 2021
Version 2.0
detection
hunting
investigation
microsoft sentinel
security
robeving's avatar
Icon for Microsoft rankMicrosoft
Joined April 02, 2020
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

camc's avatar
camc
Copper Contributor
Oct 10, 2022

diaalfar you can't connect multiple SIEM. You can however use a workspace query in all of your workspaces referencing the workspace containing the CTI data, then just query as normal.

 

e.g. 

workspace("workspace-with-cti").ThreatIntelligenceIndicator

| where ...