Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Publisher | Microsoft Corporation |
| Support Tier | Microsoft |
| Support Link | https://support.microsoft.com |
| Categories | domains |
| Version | 3.0.2 |
| Author | Microsoft - support@microsoft.com |
| First Published | 2022-11-23 |
| Solution Folder | Australian Cyber Security Centre |
| Marketplace | Azure Marketplace · Popularity: ⚪ Very Low (0%) |
This solution allows customers to share threat intelligence with the Australian Cyber Security Centre (ACSC) through the Cyber Threat Intelligence Sharing (CTIS) program. This solution contains a playbook that can be used to get indicators from Microsoft Sentinel and convert them into STIX bundles to be posted to the CTIS TAXII 2.1 server as a Contributing Partner. This solution is only available to deeded ACSC partners that have completed onboarding to the CTIS program. Credentials will be provided during the onboarding process. For more information please contact community@ctis-au.org or visit the ACSC Partner Portal.
This solution does not include data connectors.
This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.
This solution includes 1 content item(s):
| Content Type | Count |
|---|---|
| Playbooks | 1 |
| Name | Description | Tables Used |
|---|---|---|
| AusCtisExportTaggedIndicators | This playbook gets triggered every hour and perform the following actions: 1. Get all the threat int... | - |
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.0.2 | 08-01-2024 | Added support for Organization Unique Identifier in Playbook |
| 3.0.1 | 24-11-2023 | Re-developed Playbook according to new requirements. |
| 3.0.0 | 15-11-2023 | Updated the Playbook to align with the new requirements. |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊