Microsoft Sentinel

Effortless threat intelligence ingestion for Microsoft Sentinel.

Why connect Microsoft Sentinel with CYJAX?

Microsoft Sentinel brings cloud-native SIEM and SOAR together in a single workspace. The CYJAX Threat Intelligence solution polls intelligence from the CYJAX API and lands it in your Log Analytics workspace, ready for hunting, correlation and analytic rules. It is published in the Microsoft Sentinel Content Hub, so installation takes minutes and your intelligence sits alongside the rest of your security telemetry from day one.

Key features of the CYJAX and Microsoft Sentinel integration

• Automated ingestion of CYJAX threat intelligence into your Log Analytics workspace

• Supports indicators of compromise, incident reports, pastes, data leaks, domain monitor, TOR exit nodes and ransomware operations

• Each endpoint runs on its own schedule, with configurable polling intervals

• Installed directly from the Microsoft Sentinel Content Hub

• Data lands in dedicated custom tables, ready for KQL, workbooks and analytic rules