EN
Request a demo
EN
Products
Pricing
Services
Company
Resources
TEST
Request a demo
See all integrations

Microsoft Sentinel

Microsoft Sentinel is a cloud-native SIEM and SOAR solution that delivers intelligent security analytics and threat intelligence across the enterprise, enabling threat detection, investigation, and automated response at scale
SIEM & Analytics
1 Function
azure.microsoft.com GitHub

Functions (1)

Automate TheHive actions or ingest alerts

alertfeeder_ingestSentinelIncidents v1.0.0

Polls Microsoft Sentinel/Defender alerts from the Microsoft Graph Security API (/security/alerts_v2), groups them by incidentId, and creates one TheHive alert per incident

  • Author: Fabien Bloume, StrangeBee
CrowdStrike Falcon
Splunk
VirusTotal
Microsoft Defender for Endpoint
Microsoft Entra ID
MISP
Google Threat Intelligence
Recorded Future
Microsoft Defender for Office 365
Proofpoint
Shodan
Slack
AbuseIPDB
Cloudflare
URLScan.io
URLhaus
ONYPHE
YARA
CAPA
Telegram
Apache Kafka
Mattermost
Microsoft Teams
Redis
Airtable
Autofocus
AWS Lambda
AWX
Axur
BackscatterIO
BinalyzeAIR
Censys
ChainAbuse
CheckPhish
CheckPoint
Check Point HEC
Cisco Duo
CiscoUmbrella
CISMCAP
ClamAV
Cluster25
ClusterHawk
Crtsh
Cuckoo Sandbox
CyberChef
Cyberprotect
Cylance
DNS-RPZ
DNSDB
DNSdumpster
DNSLookingglass
DNSSinkhole
DomainTools
DShield
EchoTrail
EclecticIQ
EmergingThreats
EmlParser
FileInfo
FireHOLBlocklists
FoxIO
Gatewatcher CTI
Gmail
GoogleDNS
GRR Rapid Response
HarfangLab
Hashdd
Inoitsu
IntezerCommunity
Investigate
IP-API
IPVoid
isMalicious
IVRE
JAMFProtect
JIRA
Jupyter
KnowBe4
LdapQuery
Lookyloo
LupovisProwl
Mailer
MailIncidentStatus
Malpedia
MalwareClustering
Malwares
MetaDefender
Microsoft Exchange Online
MsgParser
NERD
Nessus
Netcraft
NSRL
Okta
ONYPHEActiveScan
OpenCTI
OpenCVE
OrionMalware
OVHcloud
PassiveTotal
Patrowl
PDFPreview
PhishingInitiative
Pulsedive
QrDecode
Redmine
Robtex
RT4
SecurityTrails
SendGrid
SentinelOne
SinkDB
SophosIntelix
SpamAssassin
SpamhausDBL
StamusNetworks
StopForumSpam
ThreatGrid
ThreatMiner
ThreatResponse
Thunderstorm
TorBlutmagie
TorProject
Triage
UnshortenLink
urlDNA.io
Valhalla
ValidateObservable
Verifalia
VMRay
Vulners
Watcher
Wazuh
WOT
Yeti
ZEROFOX
Zscaler
Abuse Finder
AIL Onion-Lookup
AlienVault OTX
ANY.RUN
CERT.AT pDNS
CIRCL Hash Lookup
CIRCL Passive DNS
CIRCL Passive SSL
CIRCL Vulnerability-Lookup
Cisco Secure Endpoint (Formerly AMP for Endpoints)
CrowdSec
Domain Mail SPF DMARC
DomainTools Iris
Elasticsearch
EmailRep
FireEye iSIGHT
Forcepoint WebsensePing
Google Safe Browsing
Google Vision API
GreyNoise
Have I Been Pwned
Hunter.io
Hybrid Analysis
IBM QRadar
IBM X-Force
IPinfo
Joe Sandbox
Kaspersky TIP
Maltiverse
MalwareBazaar
Malware Hash Registry (MHR)
MaxMind
MISP Warning Lists
Mnemonic Passive DNS
n8n
PAN Cortex XDR
PAN Cortex XSOAR
PAN Next Generation Firewall
PAN WildFire
PhishTank
Rapid7 InsightConnect
SEKOIA Intelligence Center
Shuffle
ThreatConnect
ThreatQ
Tines
Velociraptor
VirusShare
Back to all integrations
Explore similar integrations
Splunk
SIEM & Analytics
11 Analyzers
1 Functions
2 External integrations
Wazuh
SIEM & Analytics
1 Responders
Elasticsearch
SIEM & Analytics
1 Analyzer
1 External integration
Bee-come Part of TheHive!
Hundreds of teams all over the world rely on our platform to manage security incidents more efficiently than ever.
Put us to the test today:
Request a demo