Microsoft Sentinel

Overview

Microsoft Sentinel, also known as Azure Sentinel, is a cloud-native security information and event management (SIEM) service offered by Microsoft. It's designed to provide intelligent security analytics at cloud scale for enterprises. Azure Sentinel enables security teams to detect, investigate, and respond to security threats across the organization's entire hybrid environment, including on-premises and multi-cloud environments.

Supported Features

This community integration is built leveraging Saviynt APIs and Azure Functions(Python), for additional details about Saviynt APIs visit  API Reference

Saviynt Enterprise Identity Cloud (EIC) generates audit logs that record all actions performed by a user such as changes to SAV roles, global configurations, and connections. These audit logs include the following entries: OBJECT TYPE, OBJECT NAME, ACTION, ATTRIBUTE, ACCESS BY, ACCESS TIME, IP ADDRESS, and MESSAGE. Sentinel Integration based on Azure Functions, periodically ingest these events. 

For details refer to documentation

Support

Standard support provided for our core frameworks or connectors(REST, SOAP, JDBC, LDAP, PowerShell, Extensions, Connector Frameworks or APIs) will be applicable to community innovations. This includes basic troubleshooting and guidance on usage. Users are encouraged to seek support primarily through community channels. This includes forums, user groups, and other community-driven platforms where members can share knowledge and solutions.

Provider Information 

The connector is built by Saviynt Community Members.

Pricing

Use this integration at no additional cost - it's part of your licensed applications. Maximize your subscription by leveraging any connectors within your app limit, enhancing your capabilities without extra fees.