Forum Discussion

Ofer_Shezaf's avatar
Ofer_Shezaf
Icon for Microsoft rankMicrosoft
Oct 29, 2019

Meet the Azure Sentinel team at Ignite

Hi everyone,

 

If you want to set up a meeting on Azure Sentinel with the engineering team at Ignite, drop me a note!

 

~ Ofer

  • Phil83's avatar
    Phil83
    Copper Contributor
    Oct 30, 2019

    Ofer_Shezaf 

    Hi, 

    unfortunately i can´t come to the Ignite event but i hope you can help me in this way. I just want connect the Microsoft Intelligence SEcurity Graph to Azure SEntinel but i can´t find information about that. I just find many documents about the Microsoft Graph, the Microsoft Security API . But for my understanding, the MS Intelligence Security Graph is a Threat Intelligence Feed or isn it?

     

    When i activate the Preview Threat Intelligence Platform in SEntinel, i can read about TIP´s such Threat Connect, Palo Alto , MInd Meld MISP... 

     

    Thanks for your help

     

    Greetings, Philipp

    • Ofer_Shezaf's avatar
      Ofer_Shezaf
      Icon for Microsoft rankMicrosoft
      Nov 01, 2019

      Phil83 : The graph is an information hub. To use it to ingest TI ti Sentinel, you need to connect to it one of the TI sources you listed.

  • Gig McClain's avatar
    Gig McClain
    Copper Contributor
    Oct 29, 2019

    Ofer_Shezaf  I just got an email from Kristina Quick. We are currently using Office365ATP, Azure ATP, Azure ID protection, & Windows Defender ATP separately as a medium-sized company with about 800 employees. Just started seeing info on Sentinel and wondering how we would transition to this from where we are now. I'll look through the session list Kristina just sent me. She said I could chat with team members after the sessions. Thanks for the follow-up. I'll go with the session route for now.

Resources