MEAPSA

Connect threat indicators to Microsoft Sentinel

Learn how to connect Threat Intelligence Indicators to the Microsoft Sentinel workspace using the provided data connectors.

Security Operations Analyst

Azure

Microsoft Sentinel

Module Objectives

Upon completion of this module, the learner will be able to:

Configure the TAXII connector in Microsoft Sentinel
Configure the Threat Intelligence Platform connector in Microsoft Sentinel
View threat indicators in Microsoft Sentinel

Units

Introduction min
Plan for threat intelligence connectors min
Connect the threat intelligence TAXII connector min
Connect the threat intelligence platforms connector min
View your threat indicators with KQL min
Knowledge check min
Summary and resources min

Prerequisites

Basic experience with Azure services