SpyCloud Integration for Microsoft Sentinel

Описание: If you're a Microsoft Sentinel customer, you can leverage this integration to triage incidents using SpyCloud’s darknet insights directly in Microsoft Sentinel. The integration features:
Built-in playbooks: Eight built-in incident response playbooks run on incident triggers and fetch all relevant high-priority breach and malware records for your watchlist
Custom automation: Call SpyCloud’s API directly to gather enriched data for specific incidents, enhancing automation for responding to breached credentials and malware exposures
Easy set-up: Leverage the Solution Pack via Microsoft’s Marketplace for a full integration. Just load the integration, enter your API Key, and start safeguarding employee identity credentials

SpyCloud Enterprise Protection for Microsoft Sentinel requires a Microsoft Power Apps or Power Automate plan with custom connector feature, along with an active Azure subscription.

Get more details on the SpyCloud – Microsoft Sentinel integration here: https://spycloud.com/blog/spycloud-mi...

#microsoft #integration #SIEM #SOAR #security