ExtraHop - Microsoft Sentinel

This product is not supported for your selected Datadog site. ().

Overview

The ExtraHop - Microsoft Sentinel pack

This pack tags ExtraHop Reveal(x) network detections with severity and IPs for Microsoft Sentinel ingestion.

What this pack does:

  • Tags risk severity
  • Extracts offender/victim IPs
  • Drops low-risk noise