Table of contents
[Read More]
Security Monitoring - Developing Use Cases
Some thoughts on developing use cases and the importance of detection engineering
Figuring out MISP2Sentinel Event Filters
How they work, how to use them and some (hopefully not horrible) examples.
Table of contents
[Read More]
Use Update Indicators API to push Threat Intelligence from MISP to Microsoft Sentinel
A quick intro on how to set up MISP, Azure Functions and Sentinel to push threat intelligence from MISP to Sentinel
MISP2Sentinel
[Read More]
Pushing Threat Intelligence from MISP to Microsoft Sentinel
A quick intro on how to set up MISP, Azure Functions and Sentinel to push threat intelligence from MISP to Sentinel
Background
[Read More]
Increasing the default timeout of Azure Functions
Azure Functions are used for most data connectors, but some of them have a very low default timeout.
Background
[Read More]