Implementing TI connectors

Azure Sentinel provides a data connector specifically for integration with TIP solutions (both commercial and open source). This section will provide walk-through guidance for the steps required to ingest TI data into Azure Sentinel, using MineMeld as an example:

1. Enabling the data connector for TIPs
2. Registering app permission in Azure AD
3. Configuring the TI feed (MineMeld)
4. Confirming that the TI feed data is visible

   Note

   At the time of writing, this feature is still in public preview. You can enable this solution in your Azure Sentinel workspace to gain access to these features; however, you should expect it to change as it is developed.

Let's discuss each of these steps in detail in the following sections.

Enabling the data connector

Use the following steps to enable the data connector for TIPs within Azure Sentinel:

1. Navigate to the Azure Sentinel portal and go to the Data connectors page, as shown in the following...