Get in touch
← Sentinel Explorer
↳ GitHub sourceAnalytics ruleMedium

Dragos Notifications

View on GitHub ↗Original file ↗

Description

'Fires Microsoft Sentinel alerts for Dragos Notifcations.'
Rule type
Scheduled
Version
1.0.1
Declared status
Available
Query frequency
10m
Query period
1h
Trigger
gt 0

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Connectors

DragosSitestoreCCPCefAma

Data types

DragosAlerts_CLCommonSecurityLog

KQL query

Original query, unchanged.

DragosNotificationsToSentinel()

Declared entities

SentinelEntities

Related content

Links established from declared identifiers and solution manifests.

Solutions1
Connectors2

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
9a74fe72-4c21-4ac5-80d9-37434e809721
Additional source files 2Solutions/Dragos/Analytic Rules/DragosNotifiction.yamlsource ↗Solutions/Dragos/Data/Solution_Dragos.jsonsolution-membership ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.