Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

URLs for Sentinel Integration #104

Closed
ozzdunne opened this issue Aug 30, 2024 · 2 comments
Closed

URLs for Sentinel Integration #104

ozzdunne opened this issue Aug 30, 2024 · 2 comments

Comments

@ozzdunne
Copy link

ozzdunne commented Aug 30, 2024

Hi,

The Microsoft Settings section of the Read Me calls out some of the URLs required as dependencies for the MISP to send indicators / events to Sentinel, but not all. While in some environments, this may not matter, in highly controlled environments it can make things quite difficult as you have to work around change processes and change windows. So a URL missing from a firewall rule can take days to get corrected. It would be very useful if all the URLs required to enable MISP to send events / indicators to Sentinel were called out in the read me section. The one we noticed that was missing is sentinelus.azure-api.net.

Thanks

@arteta22000
Copy link

the domains that you need are shown here : #99 right?

@cudeso
Copy link
Owner

cudeso commented Sep 10, 2024

Good catch @ozzdunne ; I've added them via 29ac189 in a separate FAQ section ; based on the issue mentioned by @arteta22000

@cudeso cudeso closed this as completed Sep 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants