search

cudeso / misp2sentinel

MISP to Sentinel integration
MIT License
52 stars 17 forks source link

Azure permission #85

Closed ATIOSA closed 4 months ago

ATIOSA commented 4 months ago

Hi! 

I've got a question: « Microsoft Sentinel Contributor » is a high permission. Is it possible to reduce this? Or create a custom rule? In this case, what permissions are needed?

cudeso commented 4 months ago

Hello. This permissions is part of the Microsoft requirements, please see: https://learn.microsoft.com/en-us/azure/sentinel/connect-threat-intelligence-upload-api#assign-a-role-to-the-application