Check out the new quick starts in C#, Python and NodeJS for you to get started on this now.

Build your own integration to submit custom threat indicators to Azure Sentinel and Microsoft Defender ATP.

This can also be installed from the Templates section of the ThreatConnect App Catalog. For an example of how the app can be used to manage Threat Indicators in Microsoft Graph Security, install and import the 'Microsoft Graph Security - Deploy Indicators' Playbook template. To get started, install the “ Microsoft Graph Security Threat Indicators” app in the ThreatConnect App Catalog.

ThreatConnect has built an integration with Microsoft Graph Security threat indicators that supports indicators for both Microsoft Defender ATP and Azure Sentinel.

To get started, follow the steps to download and configure the MISP connector.

We’ve added capability to submit threat indicators to Microsoft Defender ATP and Azure Sentinel using MISP, an open source threat intelligence platform.

Leverage available threat intelligence platform integrations as follows:.

You can use this capability in the following ways.

We are working with more partners to land additional integrations soon.

Customers can also allow an indicator for ignoring the indicator from automated investigations.

Microsoft Defender ATP – Enables customers to alert and/or block on threat indicators associated with malicious activity.

Azure Sentinel – Enables customers to correlate threat indicators with log data to get custom alerts on malicious activity.

to multiple Microsoft security products as follows: With this capability, customers can use a single integration to send threat indicators like a malicious IP, URL, file, etc. Finally, we’re announcing additional resources for developers to easily build solutions leveraging the Microsoft Graph Security API.Ĭustomers can now send custom threat intelligence or IoCs (Indicators of Compromise) using the Microsoft Graph Security API threat indicators entity to Microsoft Defender ATP to block or alert on threats. Our announcements also include a range of new out-of-the-box partner integrations using which customers have more options to gain efficiencies in their security investments. Today, we are announcing new capabilities in the Microsoft Graph Security API that will enable customers to derive further value by integrating with the API with the ability to share threat intelligence across additional Microsoft products and be able to easily orchestrate automated security workflows.

Microsoft easy connect