Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Feature] TI Module - MDTI API Integration #391

Open
briandelmsft opened this issue Apr 6, 2023 · 3 comments
Open

[Feature] TI Module - MDTI API Integration #391

briandelmsft opened this issue Apr 6, 2023 · 3 comments
Labels
backlog We want to do it, but it may take a while to get there enhancement Enhancement to existing module module/threatintel Threat Intelligence Module

Comments

@briandelmsft
Copy link
Owner

Add support to TI module to integrate with MDTI APIs
@briandelmsft briandelmsft added pending-triage Submitted issue needing triage enhancement Enhancement to existing module module/threatintel Threat Intelligence Module and removed pending-triage Submitted issue needing triage labels Apr 6, 2023
@briandelmsft
Copy link
Owner Author

https://learn.microsoft.com/en-us/graph/api/security-host-get-reputation?view=graph-rest-beta&tabs=http

@briandelmsft
Copy link
Owner Author

Currently the API we need for this seems to be having issues, even the built in Sentinel solution for MDTI is failing to get reputation data

{
  "error": {
    "code": "generalException",
    "message": "Error retrieving reputation",
    "innerError": {
      "date": "2023-04-10T18:05:00",
      "request-id": "e0437f93-2da3-4fc7-af8a-630ce23bb1d8",
      "client-request-id": "e0437f93-2da3-4fc7-af8a-630ce23bb1d8"
    }
  }
}

@briandelmsft
Copy link
Owner Author

Actually it looks like the API is gated behind a different 'API' license and not the standard MDTI license

@briandelmsft briandelmsft added the backlog We want to do it, but it may take a while to get there label May 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
backlog We want to do it, but it may take a while to get there enhancement Enhancement to existing module module/threatintel Threat Intelligence Module
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@briandelmsft