Microsoft Defender Threat Intelligence (MDTI) overview
What is MDTI? Microsoft Defender Threat Intelligence (MDTI) is a threat hunting and investigation solution that provides context on cyber...
Threat Intelligence
Microsoft Sentinel Threat Intelligence – Part IV – Using Workbooks
In my last blog post, I talked about how to use Threat Intelligence data along with Sentinel analytics rules. Today, I'm...
Microsoft Sentinel Threat Intelligence – Part III – Using your TI data with Analytics Rules
In my last post, I showed you how to view and manage your threat indicators on the Sentinel portal. Today,...
Microsoft Sentinel Threat Intelligence – Part II – View and manage your threat indicators
In the first part of this series, I showed what threat intelligence is, how Microsoft Sentinel integrates with external feeds,...
Microsoft Sentinel Threat Intelligence – Part I – Overview
Microsoft Sentinel is a cloud-based Security Information and Event Management (SIEM) solution and a Security orchestration, automation, and response (SOAR) platform. In this...
#Lab: How to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel
The purpose of this blog is to show you how to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel....