Use the Microsoft Azure AD Connect Health Feed integration to get indicators from the feed.
Microsoft Azure AD Connect Health Feed
- Version History
Indicator feed from Microsoft Azure AD Connect Health endpoints, fetching URLs and DomainGlobs used by Azure AD, with which you can create a list (allowlist, EDL, etc.) for your SIEM or firewall service to ingest and apply to its policy rules.
|Supported By||Cortex XSOAR|
|Created||June 30, 2020|
|Last Release||September 5, 2021|