{"id":20666194,"url":"https://github.com/hazcod/misp2sentinel","last_synced_at":"2025-04-19T16:41:40.245Z","repository":{"id":72455799,"uuid":"573444176","full_name":"hazcod/MISP2Sentinel","owner":"hazcod","description":"A Python integration that fetches Threat Intelligence from MISP and publishes it to Microsoft Sentinel SIEM.","archived":false,"fork":false,"pushed_at":"2024-02-08T04:29:54.000Z","size":96,"stargazers_count":7,"open_issues_count":3,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-03-29T10:22:19.986Z","etag":null,"topics":["azure","misp","sentinel"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hazcod.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-12-02T13:31:37.000Z","updated_at":"2025-01-07T19:18:37.000Z","dependencies_parsed_at":null,"dependency_job_id":"fb759db3-18a9-44ce-a592-9ca05a6f1414","html_url":"https://github.com/hazcod/MISP2Sentinel","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hazcod%2FMISP2Sentinel","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hazcod%2FMISP2Sentinel/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hazcod%2FMISP2Sentinel/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hazcod%2FMISP2Sentinel/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hazcod","download_url":"https://codeload.github.com/hazcod/MISP2Sentinel/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":249740261,"owners_count":21318683,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["azure","misp","sentinel"],"created_at":"2024-11-16T19:35:47.438Z","updated_at":"2025-04-19T16:41:40.210Z","avatar_url":"https://github.com/hazcod.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# MISP2Sentinel\r\n\r\nA Python script that ingests alert telemetry from MISP and inserts it into Microsoft Sentinel via the Graph API.\r\n\r\nIt will use environment variables (see `dev.env` below) to connect to both.\r\n\r\n## Usage\r\n\r\nExample docker run:\r\n\r\n```shell\r\n# dev.env is the file as specified below which contains the configuration\r\n% docker run --name=misp2sentinel -t --rm --env-file=dev.env --read-only --tmpfs=/data ghcr.io/hazcod/sentinel2misp/sentinel2misp:latest\r\n```\r\n\r\n## Build\r\n\r\nWith `make` and `docker` installed locally:\r\n\r\n```shell\r\n% make build\r\n```\r\n\r\n## Local development\r\n\r\nFirst create a local development file called `dev.env`:\r\n\r\n```env\r\nMISP_EVENT_LIMIT=1\r\nMISP_BASE_URL=https://\r\nMISP_KEY=\r\nMISP_EVENT_TIMEFRAME=7d\r\n\r\nAZ_TENANT_ID=\r\nAZ_MISP_CLIENT_ID=\r\nAZ_MISP_CLIENT_SECRET=\r\nAZ_SUBSCRIPTION=\r\nAZ_SENTINEL_RG=\r\nAZ_SENTINEL_WORKSPACE_NAME=\r\nAZ_DAYS_TO_EXPIRE=\r\n```\r\n\r\nAnd now build \u0026 run the docker container:\r\n\r\n```shell\r\n% make\r\n```\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhazcod%2Fmisp2sentinel","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhazcod%2Fmisp2sentinel","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhazcod%2Fmisp2sentinel/lists"}