Description
Cyberint, a Check Point company, provides a Microsoft Sentinel integration to ingest Indicators of Compromise (IOCs) from the Infinity External Risk Management solution into Microsoft Sentinel. This connector automatically pulls the daily IOC feed — including malicious IPs, domains, URLs, and file hashes — enriched with threat context such as severity, confidence, and detected activity.
- Declared author / publisher
- Checkpoint Cyberint
Declared sources
Metadata from the source file. No dependencies inferred from KQL.
Data types
Declared permissions
Read and Write permissions are required.
Workspace
Workspace
Check Point Cyberint API Key, Argos URL, and Customer Name
The connector API key, Argos URL, and Customer Name are required
Connector instructions
Content published in the repository. Refer to the original file for all parameters.
Connect Check Point Cyberint IOC Feed to Microsoft Sentinel
To enable the connector provide the required information below and click on Connect.
**Argos URL** — Cyberint API URL for your tenant (e.g. `https://your_tenant.cyberint.io`)
**API Token** — Cyberint API access token
**Customer Name** — Company (client) name associated with your Cyberint instance
>
Argos URL
API Token
Customer Name
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- Commit
9800e51↗- Source identifier
CheckPointCyberintIOC
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC