What's new and where do I get it?
With the new Threat Intelligence API that came out back in May 2023 a slew of new connectors is making their way into the content hub within Microsoft Sentinel, MISP2Sentinel being one of them. This new connector brings a number of advantages over the old App Reg to MISP platform where only one Sentinel workspace can be integrated at a time, now multiple can be pushed to from a single integration point.
Do I need to do anything?
If you want to use this connector, visit the Microsoft Sentinel Content Hub > MISP2Sentinel Solution and click install. To integrate MISP follow the steps here
Where can I learn more about this?
See the below links for additional information around the MISP2Sentinel Project
Blog Entry for MISP2Sentinel Project
Comentários