Team Cymru Scout for Microsoft Sentinel
Solution: Team Cymru Scout
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Publisher | Team Cymru |
| Support Tier | Partner |
| Support Link | http://team-cymru.com |
| Categories | domains |
| Version | 3.1.1 |
| Author | Team Cymru - support@cymru.com |
| First Published | 2024-07-16 |
| Last Updated | 2025-12-14 |
| Solution Folder | Team Cymru Scout |
| Marketplace | Azure Marketplace · Popularity: 🟡 Low (16%) |
Team Cymru Scout brings the most advanced AI-powered real-time intelligence into Microsoft Sentinel. The Microsoft Sentinel Integration allows you to perform LiveInvestigation on Indicators like IP, Domain and perform Correlation of Team Cymru Scout Data with Other Sources. It also leverage the capability to generate incident and notify when malicious ip found.
Contents
Data Connectors
This solution provides 1 data connector(s):
Tables Used
This solution uses 33 table(s):
🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g.
_s,_d,_b,_t,_g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.
Content Items
This solution includes 28 content item(s):
| Content Type | Count |
|---|---|
| Parsers | 22 |
| Playbooks | 3 |
| Watchlists | 2 |
| Workbooks | 1 |
Workbooks
Playbooks
| Name | Description | Tables Used |
|---|---|---|
| Team Cymru Scout Create Incident And Notify | This playbook will create an incident for suspicious or malicious ip and notify to pre-defined or us... | - |
| Team Cymru Scout Enrich Incident | This playbook will fetch and ingest IP or Domain Indicator data based on Entity mapped in Microsoft ... | - |
| Team Cymru Scout Live Investigation | This playbook will fetch and ingest IP or Domain Indicator data based on input parameters given in t... | - |
Parsers
Watchlists
| Name | Description | Tables Used |
|---|---|---|
| TeamCymruScoutDomainData | - | - |
| TeamCymruScoutIPData | - | - |
Release Notes
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.1.1 | 25-09-2025 | Fixed bug in TeamCymruScoutEnrichIncident playbook. |
| 3.1.0 | 16-05-2025 | Updated Workbook, Parser, Data Connector and created new playbook. |
| 3.0.0 | 07-08-2024 | Added Solution for Team Cymru Scout. |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊