Microsoft Sentinel

The intelligence feed connection is performed using our TAXII server. You can learn the details on the TAXII server page:

TAXII Server

Instructions connect your Sentinel instance with our feed

Click on the “ Go To Content Hub” Button

Search for “Threat Intelligence”

Select Threat Intelligence and Click Install on the Right Hand Panel, once installed click manage.

Select Threat Intelligence TAXII

On the right hand panel select “Open connector page”

Fill the connector details with your credentials and select Once a minute as Polling frequency.

Your new connector will start to ingest indicators automatically.