Arbala Security Mutiltool

The Arbala Security Multitool is a new browser extension that will allow you to submit IOCs directly from your web browser to your Azure Sentinel environment. The tool is currently in alpha and will allow you submit a domain name along with a description of the IOC. We will be updating the tool frequently bring exciting new features. You can expect submission of file hashes, URLs, and IP addresses very soon. Submission of multiple IOCs at once is also just around the corner.

Please visit our Github page at https://github.com/Arbala-Security/Multitool-Extension for instructions on configuring the App Registration to allow the extension API access to your Sentinel Threat Indicator table. The link is also available in the Configuration section of the extension.