https://catalogartifact.azureedge.net/publicartifacts/data443riskmitigationinc1761580347231.azure-sentinel-solution-tacitred-defender-ti-438fe98e-8cde-4e67-b41b-6f495ca86f5d/image2_LogolargeTR.png
TacitRed Defender Threat Intelligence
durch Data443
Just a moment, logging you in...
TacitRed Defender Threat Intelligence solution for Microsoft Sentinel with automated credential IOC
The TacitRed Defender Threat Intelligence solution integrates TacitRed's threat intelligence feed with Microsoft Sentinel. It automatically retrieves compromised credentials and other threat indicators from TacitRed and ingests them into Microsoft Sentinel using the Upload API for enhanced threat detection.
This solution includes:
- Azure Function App for automated data retrieval from TacitRed
- Logic App playbook for syncing compromised credential IOCs to Microsoft Defender Threat Intelligence
- Automated threat indicator ingestion into Microsoft Sentinel
Prerequisites:
- Microsoft Sentinel workspace
- TacitRed API credentials
- Microsoft Defender Threat Intelligence access
Auf einen Blick
https://catalogartifact.azureedge.net/publicartifacts/data443riskmitigationinc1761580347231.azure-sentinel-solution-tacitred-defender-ti-438fe98e-8cde-4e67-b41b-6f495ca86f5d/image3_defender.png