Halcyon for Microsoft Sentinel (Preview)
Solution: Halcyon
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Publisher | Halcyon |
| Support Tier | Partner |
| Support Link | https://www.halcyon.ai |
| Categories | Security - Threat Protection |
| Version | 3.1.0 |
| Author | Halcyon - support@halcyon.ai |
| First Published | 2025-12-22 |
| Last Updated | 2026-06-26 |
| Solution Folder | Halcyon |
| Marketplace | Azure Marketplace · Popularity: ⚪ Very Low (0%) |
The Halcyon solution for Microsoft Sentinel enables you to ingest Halcyon Events and Alerts into Microsoft Sentinel using the Microsoft Sentinel Analytics Workspace.
Underlying Microsoft Technologies used:
This solution takes a dependency on the following Microsoft technologies, and some of these dependencies either may be in Preview state or might result in additional data ingestion or operational costs:
b. Azure Monitor Data Collection Rules (DCR)
c. Azure Monitor Data Collection Endpoints (DCE)
d. Azure Log Analytics workspaces
Contents
Data Connectors
This solution provides 2 data connector(s):
Tables Used
This solution uses 3 table(s):
| Table | Used By Connectors | Used By Content |
|---|---|---|
HalcyonAlertUpdatesV2_CL |
Halcyon Connector (v2) | - |
HalcyonEventsV2_CL |
Halcyon Connector (v2) | - |
HalcyonEvents_CL |
Halcyon Connector | - |
Content Items
This solution includes 8 content item(s):
| Content Type | Count |
|---|---|
| Parsers | 8 |
Parsers
| Name | Description | Tables Used |
|---|---|---|
| Halcyon_Alerts | - | HalcyonAlertUpdatesV2_CL (read) |
| Halcyon_OCSF_ApplicationLifecycle | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_Authentication | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_DnsActivity | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_FileActivity | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_KernelActivity | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_NetworkActivity | - | HalcyonEventsV2_CL (read) |
| Halcyon_OCSF_ProcessActivity | - | HalcyonEventsV2_CL (read) |
Release Notes
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.2.0 | 10-06-2026 | New connector, new event and alert tables with OCSF schema, and parsers |
| 3.1.0 | 24-03-2026 | Update Connector to receive events with OCSF schemas |
|3.0.0 | 09-12-2025 | Initial Solution release
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊