- Get started
- Build
- HTTP Request
- How connector nodes work
- Create a connection
- Sales and customer relationships
- Customer support and help desk
- Messaging and meetings
- Email
- Marketing
- Social media
- Files, documents, and e-signature
- Projects, collaboration, and code
- People and recruiting
- Finance and commerce
- AI models and agents
- Speech, vision, and language
- Data and location
- Cloud, identity, and security
- Azure Defender for Cloud
- Datadog
- Microsoft Azure
- Microsoft Azure Active Directory
- Microsoft Azure Sentinel
- Microsoft Sentinel Threat Intelligence
- Okta
- Deploy and run
- Examples
- Reference
Microsoft Sentinel Threat Intelligence
Look up the Microsoft Sentinel Threat Intelligence connector: its actions in alphabetical order, and the sign-in methods of a Microsoft Sentinel Threat Intelligence connection.
The Microsoft Sentinel Threat Intelligence connector lets a workflow publish threat indicators to Microsoft Sentinel. In the Add node panel, it's in the Connector category, under Microsoft Sentinel Threat Intelligence. How connector nodes work describes how a connector node is set up.
This page lists what the connector can do in Maestro Automate. Select an action to see how to configure it.
Actions
Each action is a node that does one thing in Microsoft Sentinel Threat Intelligence.
| Action | What it does |
|---|---|
| Create New Indicator | Creates a threat intelligence indicator in Azure using STIX format. |
Connection
A Microsoft Sentinel Threat Intelligence node signs in through a connection. Create a connection describes how to create one from the node. On the Connect to page, you sign in with this method:
| Sign-in method | What you need |
|---|---|
| OAuth 2.0 | Client ID - The client ID of the registered application in AAD. You can find it in the Overview section of your Microsoft Azure application registration; Workspace ID - The ID of your Sentinel Threat Intelligence workspace; Tenant ID - The tenant ID of your Azure Active Directory; Client secret - The client secret of the registered application in AAD. |
Microsoft Sentinel Threat Intelligence authentication in the Integration Service guide describes the full connection setup, including prerequisites and advanced settings.
Next steps
- Connector: every connector, grouped by area.
- Create a connection: sign a workflow in to an app.
- Community: ask questions and share workflows with other builders on the UiPath Forum.