Forum Discussion
Threat Intelligence Upload Indicators API "disconnected" status but data appears to be flowing
As stated in the title, the Threat Intelligence Upload Indicators API data connector has a status of disconnected but when I look at the graph for the connector, data appears to be flowing through he...
Porter76 Have you integrated Microsoft Defender Threat Intelligence (MDTI) or any TAXII feed with sentinel? Because it happens when you connect any of these connector with sentinel it also shows the data flowing on the other connectors of TI because of the same table 'ThreatIntelligenceIndicators'
I am also facing the same issue and yes i have connected MDTI and some open source TAXII feeds. i have disconnected it but still data is flowing into the Sentinel.
I was looking for a way to disable this as the integration which i have done was only for testing.
I was looking for a way to disable this as the integration which i have done was only for testing.