OpenCTI

Note: There may be known issues pertaining to this Solution, please refer to them before installing.

The OpenCTI solution for Microsoft Sentinel enables you to ingest threat intelligence data from OpenCTI platform into Microsoft Sentinel. This solution includes SOAR Connector and Playbooks which leverage OpenCTI indicators data to not only enrich Microsoft Sentinel incidents but also add indicators to OpenCTI.

Custom Azure Logic Apps Connectors: 1, Playbooks: 4

Learn more about Microsoft Sentinel | Learn more about Solutions