↳ GitHub sourceSolution

OpenCTI

Description

The [OpenCTI](https://www.filigran.io/en/products/opencti/) solution for Microsoft Sentinel enables you to ingest threat intelligence data from OpenCTI platform into Microsoft Sentinel. This solution includes SOAR Connector and Playbooks which leverage OpenCTI indicators data to not only enrich Microsoft Sentinel incidents but also add indicators to OpenCTI.

Version: 2.0.0
Declared author / publisher: Microsoft - support@microsoft.com
Support tier: Microsoft

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/OpenCTI/data/Solution_OpenCTI.json ↗
Commit: 629d1d3 ↗
Source identifier: azure-sentinel-solution-opencti

Additional source files 2

Solutions/OpenCTI/data/Solution_OpenCTI.jsonsolution-manifest ↗Solutions/OpenCTI/SolutionMetadata.jsonsolution-metadata ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.