Google Threat Intelligence - IoC Stream

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

This playbook will ingest Google Threat Intelligence from your IoC Streams into Threat Intelligence Sentinel.

Attribute	Value
Type	Playbook
Solution	Google Threat Intelligence
Source	View on GitHub

Logic App Connectors

This playbook uses 4 Logic App connectors / built-in actions:

Connector / Action	Type	Connections	Actions
azuresentinel	Managed	1	1
azuretables	Managed	1	3
googlethreatintelligence	Managed	0	1
GoogleThreatIntelligence-CustomConnector	Custom	1	0

Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action	Method	Endpoint	Other
Threat_Intelligence_-Upload_STIX_Objects(Preview)	post	/ThreatIntelligence/@{encodeURIComponent('')}/UploadStixObjects/	—

azuretables (Managed)

Action	Method	Endpoint	Other
Update_last_execution	put	/v2/storageAccounts/@{encodeURIComponent(encodeURIComponent(variables('account_name')))}/tables/@{encodeURIComponent(variables('table_name'))}/entities(PartitionKey='@{encodeURIComponent('IoCStream-',workflow().name)}',RowKey='@{encodeURIComponent('LastExTimestamp')}')	—
Create_table_(V2)	post	/v2/storageAccounts/@{encodeURIComponent(encodeURIComponent(variables('account_name')))}/tables	—
Get_last_execution	get	/v2/storageAccounts/@{encodeURIComponent(encodeURIComponent(variables('account_name')))}/tables/@{encodeURIComponent(variables('table_name'))}/entities(PartitionKey='@{encodeURIComponent('IoCStream-',workflow().name)}',RowKey='@{encodeURIComponent('LastExTimestamp')}')	—

googlethreatintelligence (Managed)

Action	Method	Endpoint	Other
Get_IoC_Stream_list	get	/ioc_stream	—

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks · Back to Google Threat Intelligence