CYFIRMA Digital Risk
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | CyfirmaDigitalRiskAlertsConnector |
| Publisher | Microsoft |
| Used in Solutions | Cyfirma Digital Risk |
| Collection Method | CCF |
| Connector Definition Files | CyfirmaDigitalRiskAlerts_DataConnectorDefinition.json |
| DCR Definition Files | CyfirmaDigitalRiskAlerts_DCR.json |
| CCF Configuration | CyfirmaDigitalRiskAlerts_PollerConfig.json |
| CCF Capabilities | APIKey |
| Microsoft Learn | View on Learn |
The CYFIRMA Digital Risk Alerts data connector enables seamless log ingestion from the DeCYFIR/DeTCT API into Microsoft Sentinel. Built on the Microsoft Sentinel Codeless Connector Platform, it leverages the DeCYFIR Alerts API to retrieve logs. Additionally, it supports DCR-based ingestion time transformations, which parse security data into a custom table during ingestion. This eliminates the need for query-time parsing, enhancing performance and efficiency.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
CyfirmaDBWMDarkWebAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaDBWMPhishingAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaDBWMRansomwareAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaSPEConfidentialFilesAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaSPEPIIAndCIIAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaSPESocialThreatAlerts_CL |
✓ | ✓ | ✓ |
CyfirmaSPESourceCodeAlerts_CL |
✓ | ✓ | ✓ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. CYFIRMA Digital Risk
Connect to CYFIRMA Digital Risk Alerts to ingest logs into Microsoft Sentinel. This connector uses the DeCYFIR/DeTCT API to retrieve alerts and supports DCR-based ingestion time transformations for efficient log parsing.
- CYFIRMA API URL: https://decyfir.cyfirma.com
- CYFIRMA API Key: (password field)
- API Delta: API Delta
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊