Forum Discussion

Tobias_Moe's avatar
Tobias_Moe
Copper Contributor
Jul 11, 2023
Solved

Microsoft Threat Intelligence Article Not Found

Hello,   I got a hit in Sentinel on the rule "TI map IP entity to Network Session Events (ASIM Network Session schema)" for a network session that is going to IP address 54.161.241.46. The reasoni...
  • KubaTom's avatar
    KubaTom
    Jul 11, 2023

    Tobias_Moe 

    The premium license is defo not cheap, and whether it's worth it or not is entirely depending on the size of your org, use cases, the actual need for TI-related info and feeds etc.
    MS do a 90 days free trial and I'd encourage anyone to just try it out for yourself here: https://signup.microsoft.com/get-started/signup?OfferId=8851ff02-fd34-4302-aa87-01247004749d&culture=en-gb&country=gb&ali=1&products=8851ff02-fd34-4302-aa87-01247004749d

    You get a couple of licenses so you can assign them as you see fit. And it's enough time to allow you to form an opinion of your own, taking into account your and your org's specific requirements, expectations etc.