HYAS Insight for Microsoft Sentinel

Solution: HYAS

HYAS Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index


Attribute Value
Publisher HYAS
Support Tier Partner
Support Link https://www.hyas.com/contact
Categories domains
Version 3.0.0
Author Microsoft - support@microsoft.com
First Published 2021-10-20
Solution Folder HYAS
Marketplace Azure Marketplace · Popularity: ⚪ Very Low (4%)

HYAS Insight is a threat investigation and attribution solution that uses exclusive data sources and non-traditional mechanisms to improve visibility and productivity for analysts, researchers, and investigators while increasing the accuracy of findings. HYAS Insight connects attack instances and campaigns to billions of indicators of compromise to deliver insights and visibility. With an easy-to-use user interface, transforms, and API access, HYAS Insight combines rich threat data into a powerful research and attribution solution. HYAS Insight is complemented by the HYAS Intelligence team that helps organizations to better understand the nature of the threats they face on a daily basis.

Data Connectors

This solution does not include data connectors.

This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.

Content Items

This solution includes 25 content item(s):

Content Type Count
Playbooks 25

Playbooks

Name Description Tables Used
HYASInsight Enrich Incident By C2 Attribution This playbook enriches emails asscociated with an incident with By C2 Attribution information. -
HYASInsight Enrich Incident By C2 Attribution This playbook enriches file hashes asscociated with an incident with By C2 Attribution information. -
HYASInsight Enrich Incident By C2 Attribution Information This playbook enriches file hashes asscociated with an incident with ssl_certificate information. -
HYASInsight Enrich Incident By C2 Attribution Information This playbook enriches ip addresses asscociated with an incident with by c2 attribution information. -
HYASInsight Enrich Incident By C2Attribution Info This playbook enriches hosts asscociated with an incident with C2Attribution information. -
HYASInsight Enrich Incident By Dynamic DNS This playbook enriches emails asscociated with an incident with By Dynamic DNS information. -
HYASInsight Enrich Incident By Dynamic DNS Information This playbook enriches ip addresses asscociated with an incident with by dynamic dns information. -
HYASInsight Enrich Incident By DynamicDNS Info This playbook enriches hosts asscociated with an incident with Dynamic DNS information. -
HYASInsight Enrich Incident By Geo Location Information This playbook enriches ip addresses asscociated with an incident with by geo location information. -
HYASInsight Enrich Incident By Malware Information This playbook enriches file hashes asscociated with an incident with by malware information. -
HYASInsight Enrich Incident By Malware Sample Info This playbook enriches hosts asscociated with an incident with Malware Sample information. -
HYASInsight Enrich Incident By OS Indicator Info This playbook enriches hosts asscociated with an incident with By OS Indicator information. -
HYASInsight Enrich Incident By OS Indicator Information This playbook enriches file hashes asscociated with an incident with by os indicator information. -
HYASInsight Enrich Incident By OS Indicator Information This playbook enriches ip addresses asscociated with an incident with by os indicator information. -
HYASInsight Enrich Incident By Passive DNS Information This playbook enriches ip addresses asscociated with an incident with by passivedns information. -
HYASInsight Enrich Incident By Passive Hash Info This playbook enriches hosts asscociated with an incident with By Passive Hash information. -
HYASInsight Enrich Incident By Passive Hash Information This playbook enriches ip addresses asscociated with an incident with by passivehash information. -
HYASInsight Enrich Incident By SSL Certificate Info This playbook enriches hosts asscociated with an incident with By SSL Certificate information. -
HYASInsight Enrich Incident By SSL Certificate Information This playbook enriches ip addresses asscociated with an incident with by ssl certificate information... -
HYASInsight Enrich Incident By Sample Data Information This playbook enriches ip addresses asscociated with an incident with by sample information. -
HYASInsight Enrich Incident By SinkHole Information This playbook enriches ip addresses asscociated with an incident with by sinkhole information. -
HYASInsight Enrich Incident By WHOIS This playbook enriches emails asscociated with an incident with By WHOIS information. -
HYASInsight Enrich Incident By WHOIS Current Info This playbook enriches hosts asscociated with an incident with By WHOIS Current information. -
HYASInsight Enrich Incident By WHOIS Info This playbook enriches hosts asscociated with an incident with By WHOIS information. -
HYASInsight Enrich Incident By WHOIS Info This playbook enriches phone numbers asscociated with an incident with WHOIS information. -

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.0.0 21-02-2024 Renamed older Playbooks added new Playbooks

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index