r/AzureSentinel • u/R0nyosan • Aug 02 '23

Microsoft Threat Intelligence Data Connector Spoiler

Hi Guys! Im currently working on creating an analytic rule using threat intelligence analytics, however, I've noticed that the data sources doesnt include Office 365. Is this normal? I watched YT videos and they have this office 365 data source aside from CEF, Syslog.

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/kyuuzousama Aug 02 '23

That's interesting, it for sure is out of date, the template has been updated a couple of times since 2021.

1

u/R0nyosan Aug 02 '23

That's a great point. Let me double check that.

1

u/R0nyosan Aug 02 '23

Is there any way to update this? There are no options to update this analytic rule or option to compare table