Hi,
Can anyone explain about the SOAR based approach to ingest alerts from MDE to SecOps SOAR instead SecOps SIEM?
Does anyone faced any challenges?
Which connector I should use? Microsoft Graph Security
Question
Any Drawbacks with SecOps SOAR based integration for MDE Alerts Ingestion
+6- Bronze 2
+17You would use the MS 365 Incidents Connector -
The connector will ingest the alerts directly into the SOAR, as opposed to having them in SIEM and using the passthrough rule set to get them as alerts
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.