Supported Cortex XSOAR versions: 5.5.0 and later.
Use the Microsoft Azure AD Connect Health Feed integration to get indicators from the feed. This integration was integrated and tested with version 1 of Azure AD Connect Health Feed
- Navigate to Settings > Integrations > Servers & Services.
- Search for Azure AD Connect Health Feed.
- Click Add instance to create and configure a new integration instance.
|tlp_color||The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed. More information about the protocol can be found at https://us-cert.cisa.gov/tlp||False|
|feedFetchInterval||Feed Fetch Interval||False|
|url||The Microsoft Azure endpoint URL||True|
|feedBypassExclusionList||Bypass exclusion list||False|
|insecure||Trust any certificate (not secure)||False|
|proxy||Use system proxy settings||False|
- Click Test to validate the URLs, token, and connection.
You can execute these commands from the Demisto CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
Gets indicators from the feed.
|limit||The maximum number of results to return. The default value is 10.||Optional|
There is no context output for this command.