[Feature] TI Module - MDTI API Integration

[briandelmsft]

Add support to TI module to integrate with MDTI APIs

[briandelmsft]

https://learn.microsoft.com/en-us/graph/api/security-host-get-reputation?view=graph-rest-beta&tabs=http

[briandelmsft]

Currently the API we need for this seems to be having issues, even the built in Sentinel solution for MDTI is failing to get reputation data

{
  "error": {
    "code": "generalException",
    "message": "Error retrieving reputation",
    "innerError": {
      "date": "2023-04-10T18:05:00",
      "request-id": "e0437f93-2da3-4fc7-af8a-630ce23bb1d8",
      "client-request-id": "e0437f93-2da3-4fc7-af8a-630ce23bb1d8"
    }
  }
}

[briandelmsft]

Actually it looks like the API is gated behind a different 'API' license and not the standard MDTI license

[piaudonn]

Want to revisit that to for customers who have the license? A dedicated module or leveraging the base module perhaps?

[briandelmsft]

@piaudonn what about a toggle on the existing TI module?

[piaudonn]

It might be easier. While talking about TI, can we add URL as a supported entity as well for TI checks?

[briandelmsft]

Yeah we really should