Description
The [Dragos Platform](https://www.dragos.com/) is the leading Industrial Cyber Security platform it offers a comprehensive Operational Technology (OT) cyber threat detection built by unrivaled industrial cybersecurity expertise. This solution enables Dragos Platform notification data to be viewed in Microsoft Sentinel so that security analysts are able to triage potential cyber security events occurring in their industrial environments.
- Declared author / publisher
- Dragos
Declared sources
Metadata from the source file. No dependencies inferred from KQL.
Data types
Declared permissions
Read and Write permissions are required.
Workspace
Workspace
Dragos Sitestore API access
A Sitestore user account that has the `notification:read` permission. This account also needs to have an API key that can be provided to Sentinel.
Connector instructions
Content published in the repository. Refer to the original file for all parameters.
Please provide the following information to allow Microsoft Sentinel to connect to your Dragos Sitestore.
Dragos Sitestore Hostname
Dragos Sitestore API Key ID
Dragos Sitestore API Key Secret
Minimum Notification Severity. Valid values are 0-5 inclusive. Ensure less than or equal to maximum severity.
Maximum Notification Severity. Valid values are 0-5 inclusive. Ensure greater than or equal to minimum severity.
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- File
- Solutions/Dragos/Data Connectors/DragosSiteStore_CCP/dragosSitestoreDataConnectorDefinition.json ↗
- Commit
7ca9800↗- Source identifier
DragosSitestoreCCP
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC