Azure Sentinel Integration (Legacy)

this implementation method is legacy please use the azure sentinel integration tab for the latest instructions you can send your flare alerts directly to your azure sentinel instance here's how to configure flare and receive data in your sentinel workspace for detailed instructions, follow the storylane demo provided below configuration you will need a workspace with read/write permissions as well as keys (created in azure key vault) go to https //app flare io/#/alerts click on create channel enter a name for the channel select "azure sentinel" as type fill in the information from azure workspace id and shared key go to sentinel > settings > workspace setting > agents management from there open the dropdown log analytics agent instructions you will see your workspace id and primary key there test channel confirm the values are correct by using the test channel button you should receive a test log inside your workspace log analytics within a minute create alert channel expected output you should by then receive all the data flare sends directly in your workspace's log analytics note that we will write in a table called firework cl flare solution we also have workbooks that aggregate the data you received in various dashboards and playbooks that automate opening of incidents and sending of emails when leaked credentials (email/password) are found you can create the solution on azure by https //portal azure com/#view/microsoft azure marketplace/galleryitemdetailsbladenopdl/product /%7b%22displayname%22%3a%22flare%20for%20microsoft%20sentinel%22%2c%22itemdisplayname%22%3a%22flare%20for%20microsoft%20sentinel%22%2c%22id%22%3a%22flaresystmesinc1617114736428 flare systems firework sentinel%22%2c%22bigid%22%3a%22dzh318z09bbx%22%2c%22legacyid%22%3a%22flaresystmesinc1617114736428 flare systems firework sentinel%22%2c%22offerid%22%3a%22flare systems firework sentinel%22%2c%22publisherid%22%3a%22flaresystmesinc1617114736428%22%2c%22publisherdisplayname%22%3a%22flare%20systems%22%2c%22summary%22%3a%22the%20intuitive%20platform%20that%20monitors%20your%20digital%20footprint%20%26%20delivers%20actionable%20intelligence%22%2c%22longsummary%22%3a%22flare%20identifies%20your%20company%e2%80%99s%20digital%20assets%20made%20publicly%20available%20due%20to%20human%20error%20or%20malicious%20attacks %20%22%2c%22description%22%3a%22%3cdiv%3e%3cb%3eflare%3c%2fb%3e%20is%20the%20proactive%20digital%20footprint%20monitoring%20solution%20for%20organizations %20our%20ai driven%20technology%20constantly%20scans%20the%20online%20world%2c%20including%20the%20dark%2c%20deep%20and%20clear%20web%2c%20to%20discover%20unknown%20events%2c%20automatically%20prioritize%20risks%20and%20deliver%20actionable%20intelligence%20you%20can%20use%20instantly%20to%20improve%20security %3cbr%3e%3c%2fdiv%3e%3cdiv%3e%3cbr%3e%3cdiv%3e%3ca%20href%3d%5c%22https%3a%2f%2fsignup flare systems%2ftrial%5c%22%3erequest%20a%20free%20trial!%3c%2fa%3e%3c%2fdiv%3e%3c%2fdiv%3e%3cdiv%3e%3cbr%3e%3c%2fdiv%3e%3cdiv%3e%3cspan%3e%3cp%20dir%3d%5c%22ltr%5c%22%3e%3cb%3ehow%20can%20microsoft%20sentinel%20accelerate%20flare's%20capacity%20to%20detect%20vulnerabilities%3f%3c%2fb%3e%3c%2fp%3e%3cul%3e%3cli%3e%3cspan%3efast%20track%20analysis%20of%20trends%20in%20various%20dark%20web%20platforms%20by%20offering%20real time%20analysis%20and%20raising%20alerts%20or%20open%20incidents%20when%20necessary %20out%20of%20the%20box%20analytics%20and%20automation%20rules%20can%20show%20you%20which%20platforms%20are%20worthy%20of%20your%20attention%2c%20and%20warn%20you%20if%20these%20change %3c%2fspan%3e%3c%2fli%3e%3cli%3e%3cspan%3eautomate%20incidents%20creation%20and%20flow%20to%20resolve%20them%2c%20such%20as%20email%20warnings%20to%20employees%20when%20their%20credentials%20are%20compromised%2c%20and%20closing%20of%20the%20incident%20when%20password%20has%20been%20changed %3c%2fspan%3e%3c%2fli%3e%3cli%3e%3cspan%3edirectly%20integrate%20your%20pre existing%20systems%20and%20processes%20to%20flare %20avoid%20having%20to%20integrate%20through%20api%20and%20save%20precious%20engineering%20time %3c%2fspan%3e%3c%2fli%3e%3c%2ful%3e%3c%2fspan%3e%3c%2fdiv%3e%22%2c%22isprivate%22%3afalse%2c%22hasprivateoffer%22%3afalse%2c%22ismacc%22%3afalse%2c%22ispreview%22%3afalse%2c%22isbyol%22%3afalse%2c%22iscspenabled%22%3atrue%2c%22iscspselective%22%3afalse%2c%22isthirdparty%22%3atrue%2c%22isstopsell%22%3afalse%2c%22isreseller%22%3afalse%2c%22hasfreetrials%22%3afalse%2c%22marketingmaterial%22%3a%5b%5d%2c%22legaltermsuri%22%3a%22https%3a%2f%2fquery prod cms rt microsoft com%2fcms%2fapi%2fam%2fbinary%2fre5bcxh%22%2c%22privacypolicyuri%22%3a%22https%3a%2f%2fflare systems%2fwp content%2fuploads%2f2019%2f12%2fprivacy policy flaresystems pdf%22%2c%22version%22%3a%22d339874f 813d 4cf2 a0df 476b936d275e%22%2c%22metadata%22%3a%7b%22leadgeneration%22%3a%7b%22productid%22%3anull%7d%2c%22testdrive%22%3anull%7d%2c%22categoryids%22%3a%5b%22security%22%2c%22information protection%22%2c%22azurecertified%22%2c%22frompublishingportal%22%2c%22multiresourcesolution%22%2c%22readonlytemplate%22%2c%22virtualmachine%22%2c%22virtualmachine arm%22%5d%2c%22screenshoturis%22%3a%5b%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 9709 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 bc4d543d 5232 4340 be64 e271e0019f41%22%2c%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 164 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 47d5c371 1f9f 46bf ab2d f8fb0789a996%22%2c%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 12454 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 7e3d341a eacc 458d b759 1697845281b2%22%5d%2c%22videos%22%3a%5b%5d%2c%22links%22%3a%5b%7b%22id%22%3a%22website%22%2c%22displayname%22%3a%22website%22%2c%22uri%22%3a%22https%3a%2f%2fflare systems%2fpartners%2ftechnology partners%2fmicrosoft azure sentinel integrates with firework platform%2f%22%7d%5d%2c%22filters%22%3a%5b%5d%2c%22plans%22%3a%5b%7b%22id%22%3a%220001%22%2c%22displayname%22%3a%22flare%20for%20microsoft%20sentinel%22%2c%22summary%22%3a%22we%20help%20security%20teams%20visualize%20and%20manage%20external%20cyber%20risk %22%2c%22description%22%3a%22%3cdiv%3e%3cb%3eflare%3c%2fb%3e%20is%20the%20proactive%20digital%20footprint%20monitoring%20solution%20for%20organizations %20our%20ai driven%20technology%20constantly%20scans%20the%20online%20world%2c%20including%20the%20dark%2c%20deep%20and%20clear%20web%2c%20to%20discover%20unknown%20events%2c%20automatically%20prioritize%20risks%20and%20deliver%20actionable%20intelligence%20you%20can%20use%20instantly%20to%20improve%20security %3cbr%3e%3c%2fdiv%3e%3cdiv%3e%3cbr%3e%3cdiv%3e%3ca%20href%3d%5c%22https%3a%2f%2fsignup flare systems%2ftrial%5c%22%3erequest%20a%20free%20trial!%3c%2fa%3e%3c%2fdiv%3e%3c%2fdiv%3e%3cdiv%3e%3cbr%3e%3c%2fdiv%3e%3cdiv%3e%3cp%20dir%3d%5c%22ltr%5c%22%3e%3cb%3ehow%20can%20microsoft%20sentinel%20accelerate%20flare's%20capacity%20to%20detect%20vulnerabilities%3f%3c%2fb%3e%3c%2fp%3e%3cul%3e%3cli%3efast%20track%20analysis%20of%20trends%20in%20various%20dark%20web%20platforms%20by%20offering%20real time%20analysis%20and%20raising%20alerts%20or%20open%20incidents%20when%20necessary %20out%20of%20the%20box%20analytics%20and%20automation%20rules%20can%20show%20you%20which%20platforms%20are%20worthy%20of%20your%20attention%2c%20and%20warn%20you%20if%20these%20change %3c%2fli%3e%3cli%3eautomate%20incidents%20creation%20and%20flow%20to%20resolve%20them%2c%20such%20as%20email%20warnings%20to%20employees%20when%20their%20credentials%20are%20compromised%2c%20and%20closing%20of%20the%20incident%20when%20password%20has%20been%20changed %3c%2fli%3e%3cli%3edirectly%20integrate%20your%20pre existing%20systems%20and%20processes%20to%20flare %20avoid%20having%20to%20integrate%20through%20api%20and%20save%20precious%20engineering%20time %3c%2fli%3e%3c%2ful%3e%3c%2fdiv%3e%22%2c%22restrictedaudience%22%3a%7b%7d%2c%22skuid%22%3a%220001%22%2c%22planid%22%3a%22flare systems firework sentinel 1%22%2c%22legacyplanid%22%3a%22flaresystmesinc1617114736428 flare systems firework sentinelflare systems firework sentinel 1%22%2c%22keywords%22%3a%5b%5d%2c%22type%22%3a%22solutiontemplate%22%2c%22leadgeneration%22%3a%7b%22productid%22%3a%22flaresystmesinc1617114736428 flare systems firework sentinelflare systems firework sentinel 1%22%7d%2c%22testdrive%22%3anull%2c%22categoryids%22%3a%5b%5d%2c%22conversionpaths%22%3a%5b%5d%2c%22metadata%22%3a%7b%7d%2c%22uidefinitionuri%22%3a%22https%3a%2f%2fcatalogartifact azureedge net%2fpublicartifacts%2fflaresystmesinc1617114736428 flare systems firework sentinel d339874f 813d 4cf2 a0df 476b936d275e flare systems firework sentinel 1%2fuidefinition json%22%2c%22artifacts%22%3a%5b%7b%22name%22%3a%22createuidefinition%22%2c%22uri%22%3a%22https%3a%2f%2fcatalogartifact azureedge net%2fpublicartifacts%2fflaresystmesinc1617114736428 flare systems firework sentinel d339874f 813d 4cf2 a0df 476b936d275e flare systems firework sentinel 1%2fartifacts%2fcreateuidefinition json%22%2c%22type%22%3a%22custom%22%7d%2c%7b%22name%22%3a%22uidefinition json%22%2c%22uri%22%3a%22https%3a%2f%2fcatalogartifact azureedge net%2fpublicartifacts%2fflaresystmesinc1617114736428 flare systems firework sentinel d339874f 813d 4cf2 a0df 476b936d275e flare systems firework sentinel 1%2fuidefinition json%22%2c%22type%22%3a%22custom%22%7d%2c%7b%22name%22%3a%22defaulttemplate%22%2c%22uri%22%3a%22https%3a%2f%2fcatalogartifact azureedge net%2fpublicartifacts%2fflaresystmesinc1617114736428 flare systems firework sentinel d339874f 813d 4cf2 a0df 476b936d275e flare systems firework sentinel 1%2fartifacts%2fmaintemplate json%22%2c%22type%22%3a%22template%22%7d%5d%2c%22isprivate%22%3afalse%2c%22ishidden%22%3afalse%2c%22hasfreetrials%22%3afalse%2c%22isbyol%22%3afalse%2c%22isfree%22%3afalse%2c%22ispayg%22%3atrue%2c%22isstopsell%22%3afalse%2c%22cspstate%22%3a%22optin%22%2c%22isquantifiable%22%3afalse%2c%22displayrank%22%3a%222147483647%22%2c%22purchasedurationdiscounts%22%3a%5b%5d%2c%22upns%22%3a%5b%5d%2c%22hasri%22%3afalse%2c%22pricingtypes%22%3a%5b%5d%2c%22stacktype%22%3a%22arm%22%7d%5d%2c%22selectedplanid%22%3a%22flare systems firework sentinel 1%22%2c%22iconfileuris%22%3a%7b%22wide%22%3a%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 40969 9891123b 6670 46e3 a531 6a05435d2bfc 8071c886 1657 4f6f b639 2b17b0734c7d 4680abb2 5695 4190 8f7b af599fca332c%22%2c%22medium%22%3a%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 20897 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 5b7ea39e 5745 40a4 b81f 99969f4847ea%22%2c%22small%22%3a%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 50543 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 da644231 7e2c 41a7 83b6 145c268562bb%22%2c%22large%22%3a%22https%3a%2f%2fstore images s microsoft com%2fimage%2fapps 41574 9891123b 6670 46e3 a531 6a05435d2bfc cb062e59 b5c4 4968 9e48 1ef4a640b8a1 144e8183 9ddc 46a8 9c6e 7a638ee89755%22%7d%2c%22itemtype%22%3a%22single%22%2c%22hasnoproducts%22%3afalse%2c%22hasnoplans%22%3afalse%2c%22privatebadgetext%22%3anull%2c%22createbladetype%22%3a1%2c%22offertype%22%3a%22azureapplication%22%2c%22useenterprisecontract%22%3afalse%2c%22hasstandardcontractamendments%22%3afalse%2c%22standardcontractamendmentsrevisionid%22%3a%2200000000 0000 0000 0000 000000000000%22%2c%22csplegaltermsuri%22%3a%22https%3a%2f%2fquery prod cms rt microsoft com%2fcms%2fapi%2fam%2fbinary%2fre5bcxh%22%2c%22supporturi%22%3a%22https%3a%2f%2fflare systems%2fcompany%2fcontact%2f%22%2c%22ismicrosoftproduct%22%3atrue%2c%22productownershipsellingmotion%22%3a%223ppagency%22%2c%22galleryitemaccess%22%3a0%2c%22privatesubscriptions%22%3a%5b%5d%2c%22istenantprivate%22%3afalse%2c%22hasriplans%22%3afalse%2c%22pricingtypes%22%3a%5b%5d%7d/id/flare systems firework sentinel 1/resourcegroupid//resourcegrouplocation//dontdiscardjourney /false/ provisioningcontext /%7b%22initialvalues%22%3a%7b%22subscriptionids%22%3a%5b%22b69d0658 2c18 4efc a294 ebc32446a769%22%5d%2c%22resourcegroupnames%22%3a%5b%5d%2c%22locationnames%22%3a%5b%5d%7d%2c%22telemetryid%22%3a%22eedb12de e582 4bbc b088 c7b6615c617c%22%2c%22marketplaceitem%22%3a%7b%22categoryids%22%3a%5b%5d%2c%22id%22%3a%22microsoft portal%22%2c%22itemdisplayname%22%3a%22nomarketplace%22%2c%22products%22%3a%5b%5d%2c%22version%22%3a%22%22%2c%22productswithnopricing%22%3a%5b%5d%2c%22publisherdisplayname%22%3a%22microsoft portal%22%2c%22deploymentname%22%3a%22nomarketplace%22%2c%22launchingcontext%22%3a%7b%22telemetryid%22%3a%22eedb12de e582 4bbc b088 c7b6615c617c%22%2c%22source%22%3a%5b%5d%2c%22galleryitemid%22%3a%22%22%7d%2c%22deploymenttemplatefileuris%22%3a%7b%7d%2c%22uimetadata%22%3anull%7d%7d related articles