Integration Service user guide

The Microsoft Sentinel Threat Intelligence connector integrates UiPath with Microsoft's threat intelligence platform, allowing the automation to publish threat indicators whenever malicious data is identified. Each harmful item results in a new intelligence indicator, which may include additional details gathered during the process. By contributing these indicators to the organization's TI dataset, the connector supports correlation across other security events, enhances detection rules, and strengthens the organization's overall defensive posture.

Before automating processes, you need to establish a connection with your Microsoft Sentinel Threat Intelligence instance. Step-by-step instructions are available in the Azure Threat Intelligence authentication page.

The Microsoft Sentinel Threat Intelligence connector does not currently support events.

You can use the connection to enable the Microsoft Sentinel Threat Intelligence activities in UiPath® Studio and build automations for the entire Azure Threat Intelligence capabilities suite.

You can read more on the Microsoft Sentinel Threat Intelligence API by accessing the Microsoft documentation. The connector was tested with API version 2024-02-01-preview.