Datalake2Sentinel
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | Datalake2SentinelConnector |
| Publisher | Orange Cyberdefense |
| Used in Solutions | Datalake2Sentinel |
| Collection Method | Azure Function (TI Upload API) |
| Connector Definition Files | Datalake2SentinelConnector.json |
| Ingestion API | STIX 2.1 Upload Indicators API — External Azure Function code calls https://api.ti.sentinel.azure.com/workspaces/{workspace_id}/threat-intelligence-stix-objects:upload (verified at cert-orangecyberdefense/datalake2sentinel) |
| Microsoft Learn | View on Learn |
This solution installs the Datalake2Sentinel connector which is built using the Codeless Connector Platform and allows you to automatically ingest threat intelligence indicators from Datalake Orange Cyberdefense's CTI platform into Microsoft Sentinel via the Upload Indicators REST API. After installing the solution, configure and enable this data connector by following guidance in Manage solution view.
Tables Ingested
This connector ingests data into the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
ThreatIntelIndicators |
✓ | ✓ | ✗ | |
ThreatIntelObjects |
✓ | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and write permissions are required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Installation and setup instructions
Use the documentation from this Github repository to install and configure the Datalake to Microsoft Sentinel connector.
https://github.com/cert-orangecyberdefense/datalake2sentinel
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊