↳ GitHub sourceConnector

Check Point Cyberint Alerts Connector (via Codeless Connector Platform)

Description

Cyberint, a Check Point company, provides a Microsoft Sentinel integration to streamline critical Alerts and bring enriched threat intelligence from the Infinity External Risk Management solution into Microsoft Sentinel. This simplifies the process of tracking the status of tickets with automatic sync updates across systems. Using this new integration for Microsoft Sentinel, existing Cyberint and Microsoft Sentinel customers can easily pull logs based on Cyberint's findings into Microsoft Sentinel platform.
Declared author / publisher
Checkpoint Cyberint

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Declared permissions

Read and Write permissions are required.
Workspace
Workspace
Check Point Cyberint API Key, Argos URL, Customer Name
The connector API key, Argos URL, and Customer Name are required. Include CSV Attachments as JSON is optional.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Connect Checkpoint Cyberint Alerts to Microsoft Sentinel
To enable the connector provide the required information below and click on Connect. **Argos URL** — Cyberint API URL for your tenant (e.g. `https://your_tenant.cyberint.io`) **API Token** — Cyberint API access token **Customer Name** — Company (client) name associated with your Cyberint instance **Severity** — Comma-separated list of severities to fetch (low, medium, high, very_high). If empty, all severities are fetched. **Environments** — Comma-separated list of environments to fetch (e.g. Production,Staging). If empty, all environments are fetched. **Polling Interval** — How often to poll for new alerts, in minutes (default: 5) **Include CSV Attachments as JSON** — Whether to include CSV attachments as JSON content in alerts (default: false) >
Argos URL
API Token
Customer Name
Severity
Environments
Polling Interval (Minutes)
Include CSV Attachments as JSON

Related content

Links established from declared identifiers and solution manifests.

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
CheckPointCyberintAlerts
Additional source files 2Solutions/Check Point Cyberint Alerts/Data Connectors/CyberintArgosAlertsLogs_ccp/CyberintArgosAlertsLogs_connectorDefinition.jsonsource ↗Solutions/Check Point Cyberint Alerts/Data/Solution_Cyberint.jsonsolution-membership ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 11:56 UTC

GSTEP sync dates, separate from the source content’s publication dates.