Select Logs from the General section of the Microsoft Sentinel menu. Select the workspace to which you’ve imported threat indicators using either threat intelligence data connector. Open the Azure portal and navigate to the Microsoft Sentinel service. To view your threat intelligence indicators in Logs: Imported threat indicators are listed in the Microsoft Sentinel > ThreatIntelligenceIndicator table, which is the basis for threat intelligence queries run elsewhere in Microsoft Sentinel, such as in analytics or workbooks.

This procedure describes how to view your imported threat indicators in the Microsoft Sentinel Logs area, together with other Microsoft Sentinel event data, regardless of the source feed or the connector used. View your threat indicators in Microsoft Sentinel Find and view your indicators in Logs Visualize key information about your imported threat intelligence in Microsoft Sentinel with the Threat Intelligence workbook.

View and manage the imported threat intelligence in Logs and in the Microsoft Sentinel Threat Intelligence page.ĭetect threats and generate security alerts and incidents using the built-in Analytics rule templates based on your imported threat intelligence.

Import threat intelligence into Microsoft Sentinel by enabling data connectors to various TI platforms and feeds. You can integrate threat intelligence (TI) into Microsoft Sentinel through the following activities:

Does quicken work on mac or microsoft