Microsoft Sentinel — Get actionable Threat Intelligence from Twitter

Antonio Formato
11 min readMar 14, 2023

Social media platforms like Twitter have become a valuable source of information for cybersecurity professionals. Many cybersecurity experts use Twitter to share information about the latest threats and potential IOC’s that could help identify and prevent attacks. However, manually collecting and analyzing this data can be time-consuming and challenging.

To address this challenge, I decided to write a Jupyter Notebook that can automate the process of collecting IOC’s from Twitter and putting them in Microsoft Sentinel using MSTICPy. This tool can help security professionals save time and quickly identify potential security threats.

In this blog post, I will explain the process of creating this tool and how it can be used to enhance your cybersecurity efforts.

What to put in the toolbox

Microsoft Sentinel:

Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) system that provides intelligent security analytics and threat intelligence across the enterprise. It uses advanced machine learning algorithms and artificial intelligence to identify and respond to potential security threats in real-time.

--

--