Forum Discussion

David Caddick's avatar
David Caddick
Iron Contributor
Jun 13, 2019

Sentinel & ThreatIntelligenceIndicator

Has anyone been able to get the ThreatIntelligenceIndicator to work?
David Caddick's avatar
David Caddick
Iron Contributor
Jun 17, 2019

Thanks Ofer_Shezaf & @Sarah Fender 

I could be wrong, but from what I can see "Threat Connect" doesn't actually list Sentinel or Azure under the integrations?  https://threatconnect.com/integrations/

It does look very interesting and a great way to start - does this need to be connected via the API somehow? https://docs.threatconnect.com/en/latest/rest_api/rest_api.html

Sarah Fender's avatar
Sarah Fender
Former Employee
Aug 27, 2019

David Caddick  The Azure Sentinel + ThreatConnect integration is powered by the Microsoft Graph Security API. If you expand the Microsoft Graph Security API listing you'll see Azure Sentinel is called out there. 

  • adcar76's avatar
    adcar76
    Copper Contributor
    Mar 31, 2020

    Sarah Fender Ofer_Shezaf 

     

    Is there any ETA about when Threat Intelligence Platforms" Azure Sentinel Data connector and Microsoft Graph Security tiIndicators API will become GA?

    • Ofer_Shezaf's avatar
      Ofer_Shezaf
      Icon for Microsoft rankMicrosoft
      Apr 13, 2020

      adcar76

       

      We intend to bring both of these to GA this year. Be assured that the schema will not be breaking. We may add properties, but will not be deprecating any properties or changing enums so any code you write against the API today will continue to work as we move to GA. We are also supporting the existing /beta endpoint at production level of support as we are with the Threat Intelligence - Platforms data connector in Azure Sentinel.

       

      ~ Ofer

       

Resources