Demonstrate how to integrate MDTI API notebooks with MISP playbooks

MISP / misp-playbooks

MISP Playbooks

https://misp.github.io/misp-playbooks/

BSD 2-Clause "Simplified" License

163 stars 16 forks source link

Demonstrate how to integrate MDTI API notebooks with MISP playbooks #44

Open cudeso opened 1 year ago

cudeso commented 1 year ago

See for examples of notebooks https://github.com/Azure/MDTI-Solutions/tree/master/Notebooks

Integrations:

Threat profiles
Vulnerabilities
Reputation scores

cudeso commented 2 months ago

Unable to test access with existing Azure account. Although docs state that a free account (which is also used for the sync with MSentinel/MISP) should work, access to "defender.microsoft.com" always returns "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '80ccca67-54bd-44ab-8625-4b79c4dc7775' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.".