Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: TAXII data connector pollingHi, Currently if you connect to the TAXII server by default the lookback period is "Today" which means only the indicators that are added today and moving forward will be imported. Since Anomali Limo server is not updated often, you are not seeing any IOC's being imported from the Limo server. With that being said, we are adding a configurable lookback period in a couple of weeks wherein you will be able to select how much back in time do you want to go and import IOC's from the server. The default lookback period will also be updated to "All available indicator" soon which means in the first run when you connect to the server all indicators on the TAXII server will be imported and then moving forward each time the new indicators added will be imported.Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs MalliBoppe- Yes the issue was affecting Australian customers and now it has been resolved. Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs JBUB_Accelerynt-That would really help. My email is "rikapoo@microsoft.com". Please drop me an email and I will schedule a call with you sometime this week. Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs JBUB_Accelerynt - Also, can we get on a quick call to investigate and explain the issue? Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs JBUB_Accelerynt - Can you please confirm if the TIP Connector is enabled for you? Are you also using the TAXII Data connector? Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs majo01: The issue is now resolved. Are you still seeing the issue persisting? Please make sure that the TIP Connector in Sentinel is turned on. Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs This issue should now be resolved. Please let me know if you still see the issue persisting. Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs MalliBoppe- Can you please provide the support ticket link? We would need the workspace id and tenant id to further investigate the issue. Re: TiIndicators not showing up in ThreatIntelligenceIndicator Logs JBUB_Accelerynt- Can you please send me the link to the support ticket? We would need the Tenant ID and Workspace ID in order to investigate the issue further.
Recent Blog ArticlesMost RecentMost LikesArm Your Microsoft Sentinel Platform with Industry-Leading Cyber Threat Intelligence from CYFIRMA Gain visibility of your External Threat Landscape by understanding who is targeting you, vulnerabilities that put you at risk, and remedial actions you can take. Power of Threat Intelligence sprinkled across Microsoft Sentinel Power of Threat Intelligence sprinkled across Microsoft Sentinel New Threat Intelligence features in Microsoft Sentinel New Threat Intelligence features in Microsoft Sentinel Bring Threat Intelligence from Kaspersky using TAXII data connector Bring Threat Intelligence from Kaspersky using TAXII data connector Re: Import Anomali ThreatStream Feed into Microsoft Sentinel Hi Dean, You will have to create your saved search in Anomali ThreatStream. The details for API root, collection ID and credentials are below: API Root:https://api.threatstream.com/api/v1/tax...Import Anomali ThreatStream Feed into Microsoft Sentinel Bring threat intelligence from Anomali ThreatStream into Microsoft Sentinel using TAXII Data Connector Microsoft Threat Intelligence Matching Analytics: IP Detections Microsoft Threat Intelligence Matching Analytics: IP Detections Import Pulsedive Feed into Microsoft Sentinel Bring threat intelligence from Pulsedive into Microsoft Sentinel using TAXII Data Connector Import ReversingLab’s Ransomware Feed into Microsoft Sentinel Bring threat intelligence from ReversingLabs into Microsoft Sentinel using TAXII Data Connector to combat Ransomware attacks. Bring Threat Intelligence from SEKOIA.IO using TAXII data connector Bring Threat Intelligence from SEKOIA.IO using TAXII data connector
MicrosoftMicrosoftMicrosoftMicrosoft
