Learn how to connect Threat Intelligence Indicators to the Microsoft Sentinel workspace using the provided data connectors.

Learning objectives

Upon completion of this module, the learner will be able to:

<![if !supportLists]>· <![endif]>Configure the TAXII connector in Microsoft Sentinel

<![if !supportLists]>· <![endif]>Configure the Threat Intelligence Platform connector in Microsoft Sentinel

<![if !supportLists]>· <![endif]>View threat indicators in Microsoft Sentinel

Prerequisites

Basic experience with Azure services

This module is part of these learning paths

• SC-200: Connect logs to Microsoft Sentinel

• Introduction
• Plan for threat intelligence connectors
• Connect the threat intelligence TAXII connector
• Connect the threat intelligence platforms connector
• View your threat indicators with KQL
• Knowledge check
• Summary and resources