{"id":74185,"date":"2023-12-20T16:15:14","date_gmt":"2023-12-20T08:15:14","guid":{"rendered":"https:\/\/version-2.com\/?p=74185"},"modified":"2023-12-12T16:17:05","modified_gmt":"2023-12-12T08:17:05","slug":"eset-threat-intelligence-data-feeds-join-the-hunt-with-microsoft-sentinel-integration","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2023\/12\/eset-threat-intelligence-data-feeds-join-the-hunt-with-microsoft-sentinel-integration\/","title":{"rendered":"ESET Threat Intelligence data feeds join the hunt with Microsoft Sentinel integration"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ESET Threat Intelligence data feeds set to increase visibility for users operating Microsoft Sentinel SIEM\/SOAR platform.<\/h3>

BRATISLAVA \u2014 December 8, 2023 \u2014<\/strong>ESET<\/a>, a global leader in cybersecurity, today announced that its long-standing collaboration with Microsoft now includes the integration of ESET\u2019s six threat intelligence data feeds with Microsoft Sentinel<\/a>, a scalable, cloud-native solution providing security information and event management (SIEM) and security orchestration, automation, and response (SOAR) capabilities. ESET\u2019s integration utilizes Microsoft Sentinel\u2019s built-in TAXII client, helping security operations center (SOC) analysts in any organization hunt and investigate customers\u2019 threat environments. This marks a new effort to extend the benefit of ESET\u2019s unique data to organizations seeking to improve existing comprehensive threat intelligence solutions and rapid response capabilities.<\/p>

The ESET data in question is built on the back of its renowned Malware and Threat Research pedigree, which benefits from unique telemetry fed from its substantial installed user base, among them regions underserved by most competitors. This unique value-add is best demonstrated by the many notable research pieces and exclusive detections, including GreyEnergy, BlackEnergy, Industroyer, NotPetya and many of the wiper malware discovered at the start of Russia\u2019s invasion of Ukraine.

ESET\u2019s data and its research cadre also regularly feature in large botnet takedowns and disruptions. These discoveries were pursued by more than 160 researchers and software engineers working in Core Research and Threat Detection at ESET.

The threat data feeds featured in this integration comprise only relevant, curated data that has already received in-house data evaluation, curation, sorting, scoring and processing. The data feeds include APT feed, malicious files feed, botnet feed, domain feed, URL feed and IP feed. The quality of the data is also reflected in the strong standing of #ESETResearch in the cybersecurity community and the contributions of its experts in partnership with MITRE ATT&CK<\/a>, CISA, EUROPOL, FBI and a number of government entities. <\/p>

With global concerns intensely focused on threats vectoring from Russia\u2019s war in Ukraine and other hotspots going global, ESET prioritized rapid support for enterprises via its threat data in an agnostic approach to users\u2019 chosen threat intelligence (TI) platforms. This acknowledges the diversity of software and technology stack choices. The integration also signals ESET\u2019s path toward supporting seamless interaction between our data and internal tools and third-party SIEM and SOAR tools \u2014 starting with Microsoft Sentinel. This approach supports simplified workflows and reductions in manual effort and enhances efficiency. The collaboration between the two companies also demonstrates a strong market position, with two industry leaders combining their strengths.

\u201cIntegrating with Microsoft Sentinel allows us to demonstrate focus on strengthening security now. With our security-first, customer-centric mindset front and center, the integration will allow ESET and Microsoft\u2019s joint customers to immediately benefit from a more holistic view of their security posture by combining ESET\u2019s real-time threat data with customers\u2019 wider security operations,\u201d said Trent Matchett, ESET Director of Global Strategic Accounts. <\/p>

\u201cThis announcement is also a proof point for ESET\u2019s journey towards utilization of industry standard APIs (TAXII 2.1 and STIX 2.1) to deliver Threat Intelligence products. With the Microsoft Sentinel integration, ESET further demonstrates the unique value-add we\u2019ve brought to the cybersecurity community for more than 30 years. So, for SOC teams, CERTs, MSSPs or TIPs that come across this integration, they should know that ESET data is highly actionable, and with ESET\u2019s storied low false positive rates, can have immediate impact when countering threats that ESET has unique detections for,\u201d Matchett continued.

Microsoft Sentinel users can now benefit from unique, diverse, actionable feeds from ESET. They can enrich their TI in a very useful and valuable way, and significantly improve their security posture and prevent ransomware attacks, malware campaigns, etc. These benefits are built upon the strong foundations of ESET threat intelligence (data feed) and its endpoint protection products (ESET PROTECT), which collectively include:<\/p>