New report: Synthetic Phantom Read it →
All integrations

SIEM · ENRICHMENT

Microsoft Sentinel + Etugen

Enrich Microsoft Sentinel events and alerts with Etugen’s risk-scored attacker infrastructure, right where your analysts already work.

What you get

  • Indicator lookups from inside your searches and dashboards
  • Category, location and a 0–100 risk score on every IP and domain
  • Alarms on watched indicators delivered as events
  • Your logs correlated against live C2 and malware hosting

How it works

  1. Create an API key

    Generate a key in your Etugen workspace. Keys are scoped to your organization.

  2. Connect Microsoft Sentinel

    Add the key to the Etugen integration in Microsoft Sentinel.

  3. Start enriching

    Indicators in your events are categorized and scored as they arrive.

More SIEM integrations

GET ACCESS

Put Etugen inside Microsoft Sentinel.

Every plan includes API access, starting with Free.

Get access View pricing