⚠️ Cyjax

⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.

Cyjax Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Solutions Index

Attribute	Value
Publisher	Cyjax
Support Tier	Partner
Support Link	https://www.cyjax.com/demo
Categories	domains
Version	3.0.0
Author	Cyjax - info@cyjax.com
First Published	2026-03-24
Last Updated	2026-03-24
Solution Folder	Cyjax

The Cyjax solution provides the capability to ingest threat intelligence data into Microsoft Sentinel through the REST API. Refer to Cyjax documentation for more information.

Underlying Microsoft Technologies used:

This solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs:

a. Azure Monitor HTTP Data Collector API

b. Azure Functions

Data Connectors
Internal Tables
Content Items

Data Connectors

This solution provides 1 data connector(s):

Cyjax Threat Intelligence IOC Connector

Internal Tables

The following 4 table(s) are used internally by this solution's content items:

Table	Used By Connectors	Used By Content
`CyjaxAdHocEnrichment_CL` 🔶	-	Playbooks (writes), Workbooks
`CyjaxDataBreaches_CL` 🔶	-	Playbooks (writes), Workbooks
`CyjaxDomainMonitor_CL` 🔶	-	Playbooks (writes), Workbooks
`ThreatIntelIndicators`	Cyjax Threat Intelligence IOC Connector	Workbooks

🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Content Items

This solution includes 8 content item(s):

Content Type	Count
Playbooks	5
Parsers	2
Workbooks	1

Workbooks

Name	Tables Used
Cyjax	Internal use: `CyjaxAdHocEnrichment_CL` `CyjaxDataBreaches_CL` `CyjaxDomainMonitor_CL` `ThreatIntelIndicators`

Playbooks

Name	Description	Tables Used
Cyjax Ad Hoc Enrichment	This playbook is triggered via HTTP request and is designed to get IOC value from workbook provided ...	Internal use: `CyjaxAdHocEnrichment_CL` (write)
Cyjax Add Comment To Incident	This playbook is triggered via HTTP request and is designed to be used as a sub-playbook by other Cy...	-
Cyjax Data Breaches	This playbook is triggered manually from a Data Breaches Tab from Cyjax Workbook in Microsoft Sentin...	Internal use: `CyjaxDataBreaches_CL` (write)
Cyjax Domain Monitor	This playbook is triggered manually from a Domain Monitor Tab from Cyjax Workbook in Microsoft Senti...	Internal use: `CyjaxDomainMonitor_CL` (write)
Cyjax Incident Enrichment	This playbook is triggered manually or automatically from a incident in Microsoft Sentinel. It itera...	-

Parsers

Name	Description	Tables Used
CyjaxCorrelate	-	Internal use: `ThreatIntelIndicators` (read)
CyjaxThreatIndicator	-	Internal use: `ThreatIntelIndicators` (read)

Release Notes

Version	Date Modified (DD-MM-YYYY)	Change History
3.0.0	02-03-2026	Initial Solution for Cyjax Data Connector, playbooks and Workbook