Blog Post

Microsoft Sentinel Blog

2 MIN READ

Microsoft Threat Intelligence Matching Analytics: IP Detections

Microsoft

Jun 16, 2022

Microsoft Sentinel provides the capability to reference premium threat intelligence data produced by Microsoft for detection and analysis using the Microsoft threat intelligence matching analytics. ...

Updated Jun 16, 2022

Version 1.0

RijutaKapoor

Microsoft

Joined July 15, 2020

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

kimberlyrei

Microsoft

Jun 20, 2022

Threat intelligence matching analytics only process DNS queries for IPv4 (QueryType="A").

Is this meant to say that the matching is done against the response? The query itself would only contain the hostname for which an IP address is desired.